Unrated
An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessages...
CVE-2023-45360
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-45360 mediawiki Fixed in: 1:1.35.13-1~deb11u1
- Ubuntu UBUNTU-CVE-2023-45360 mediawiki
Original description The description as published by the source.
An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- web lists.fedoraproject.org
- web phabricator.wikimedia.org