Lucene search
GoogleOSV:BIT-MEDIAWIKI-2021-30157HistoryMar 06, 2024 - 11:12 a.m.
BIT-mediawiki-2021-30157
2024-03-0611:12:39
Google
osv.dev
3
mediawiki
changeslist
special pages
xss
html unescaped
vulnerability
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter-* label messages are output in HTML unescaped, leading to XSS.
References
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/
phabricator.wikimedia.org/T278058
security.gentoo.org/glsa/202107-40
www.debian.org/security/2021/dsa-4889
Related
osv
osv
CVE-2021-30157
2021-04-06 07:15:12
mediawiki - security update
2021-04-10 00:00:00
cve
cve
CVE-2021-30157
2021-04-06 07:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2021-04-10 04:45:07
prion
prion
Cross site scripting
2021-04-06 07:15:00
debiancve
debiancve
CVE-2021-30157
2021-04-06 07:15:00
redhatcve
redhatcve
CVE-2021-30157
2021-04-06 17:47:56
cvelist
cvelist
CVE-2021-30157
2021-04-06 06:43:05
ubuntucve
ubuntucve
CVE-2021-30157
2021-04-06 00:00:00
openvas
openvas
MediaWiki < 1.31.12, 1.32 < 1.35.2 Multiple Vulnerabilities - Linux
2021-04-07 00:00:00
MediaWiki < 1.31.12, 1.32 < 1.35.2 Multiple Vulnerabilities - Windows
2021-04-07 00:00:00
Fedora: Security Advisory for mediawiki (FEDORA-2021-f4223b6684)
2021-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: mediawiki-1.35.2-1.fc34
2021-04-24 20:24:48
[SECURITY] Fedora 33 Update: mediawiki-1.35.2-1.fc33
2021-04-21 21:41:50
debian
debian
[SECURITY] [DSA 4889-1] mediawiki security update
2021-04-10 15:47:12
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2021-07-17 00:00:00
nessus
nessus
Debian DSA-4889-1 : mediawiki - security update
2021-04-12 00:00:00
GLSA-202107-40 : MediaWiki: Multiple vulnerabilities
2022-01-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package mediawiki version 1.35.2-alt1
2021-04-24 00:00:00
6.4 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.0%
Related for OSV:BIT-MEDIAWIKI-2021-30157