CVE-2020-25815

🗓️ 27 Sep 2020 21:12:15Reported by mitreType

An insecure option names issue in MediaWiki 1.32.x through 1.34.x

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 26
RedhatCVE	CVE-2020-25815	2 Dec 202018:46	–	redhatcve
NVD	CVE-2020-25815	27 Sep 202021:15	–	nvd
Cvelist	CVE-2020-25815	27 Sep 202020:27	–	cvelist
UbuntuCve	CVE-2020-25815	27 Sep 202000:00	–	ubuntucve
Prion	Code injection	27 Sep 202021:15	–	prion
Github Security Blog	MediaWiki Cross-site Scripting (XSS) vulnerability	24 May 202217:29	–	github
Debian CVE	CVE-2020-25815	27 Sep 202021:15	–	debiancve
OSV	CVE-2020-25815	27 Sep 202021:15	–	osv
OSV	BIT-mediawiki-2020-25815	6 Mar 202411:13	–	osv
Friends Of PHP	Unescaped message used in HTML within LogEventsList	24 Sep 202001:38	–	friendsofphp

Nvd

Node

mediawiki mediawikiRange1.32.0–1.34.4

Node

fedoraproject fedoraMatch33

Source	Link
lists	www.lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
lists	www.lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/
gerrit	www.gerrit.wikimedia.org/g/mediawiki/core/+/ec76e14be658187544f07c1a249a047e1a75eaf8/includes/logging/LogEventsList.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Sep 2020 21:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS24.3

CVSS36.1

EPSS0.00358

CWE-79