Lucene search
MitreCVELIST:CVE-2022-34912HistoryJul 02, 2022 - 12:00 a.m.
CVE-2022-34912
2022-07-0200:00:00
mitre
www.cve.org
4
mediawiki
xss
security flaw
special contributions
An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Contributions, is used as page title without escaping. Hence, in a non-default configuration where a username contains HTML entities, it won’t be escaped.
References
lists.debian.org/debian-lts-announce/2022/09/msg00027.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7N5ZBWLNNPZKFK7Q4KEHGCJ2YELQEUJP/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKKOQXPYLMBSEVDHFS32BPBR3ZQJKY5B/
phabricator.wikimedia.org/T308473
security.gentoo.org/glsa/202305-24
www.debian.org/security/2022/dsa-5246
Related
osv
osv
BIT-mediawiki-2022-34912
2024-03-06 11:04:38
CVE-2022-34912
2022-07-02 20:15:08
mediawiki - security update
2022-09-22 00:00:00
ubuntucve
ubuntucve
CVE-2022-34912
2022-07-02 00:00:00
openvas
openvas
MediaWiki 1.36.x < 1.37.3, 1.38.x < 1.38.1 XSS Vulnerability - Windows
2022-07-06 00:00:00
MediaWiki 1.36.x < 1.37.3, 1.38.x < 1.38.1 XSS Vulnerability - Linux
2022-07-06 00:00:00
Fedora: Security Advisory for mediawiki (FEDORA-2022-f83aec6d57)
2022-09-10 00:00:00
cve
cve
CVE-2022-34912
2022-07-02 20:15:08
debiancve
debiancve
CVE-2022-34912
2022-07-02 20:15:08
nvd
nvd
CVE-2022-34912
2022-07-02 20:15:08
prion
prion
Hardcoded credentials
2022-07-02 20:15:00
redhatcve
redhatcve
CVE-2022-34912
2022-08-01 05:40:19
veracode
veracode
Cross-site Scripting (XSS)
2022-07-04 05:59:21
fedora
fedora
[SECURITY] Fedora 36 Update: mediawiki-1.37.4-1.fc36
2022-09-09 11:23:50
[SECURITY] Fedora 37 Update: mediawiki-1.38.2-1.fc37
2022-09-12 17:57:50
debian
debian
[SECURITY] [DLA 3117-1] mediawiki security update
2022-09-22 14:38:08
[SECURITY] [DSA 5246-1] mediawiki security update
2022-10-04 18:53:33
nessus
nessus
Debian DLA-3117-1 : mediawiki - LTS security update
2022-09-25 00:00:00
Debian DSA-5246-1 : mediawiki - security update
2022-10-05 00:00:00
GLSA-202305-24 : MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00
gentoo
gentoo
MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00