Unrated

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can oc...

CVE-2024-23179 First seen on SecPulse Jan 12, 2024

Original description The description as published by the source.

An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via the parentheses message. This affects subtitle links in buildSubtitleLinks.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web lists.wikimedia.org
web phabricator.wikimedia.org

Key facts

Severity: Unrated
Published: Jan 12, 2024
First seen on SecPulse: Jan 12, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03