Lucene search
MitreCVELIST:CVE-2022-42985HistoryNov 17, 2022 - 12:00 a.m.
CVE-2022-42985
2022-11-1700:00:00
mitre
www.cve.org
7
scratchlogin
mediawiki
xss
administrator privileges
cross-site scripting
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
19.4%
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting (XSS).
Related
cve
cve
CVE-2022-42985
2022-11-17 05:15:15
prion
prion
Cross site scripting
2022-11-17 05:15:00
cnvd
cnvd
MediaWiki Cross-Site Scripting Vulnerability (CNVD-2022-80687)
2022-11-21 00:00:00
nvd
nvd
CVE-2022-42985
2022-11-17 05:15:15
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
19.4%
Related for CVELIST:CVE-2022-42985