Lucene search
GoogleOSV:CVE-2023-37255HistoryJun 29, 2023 - 4:15 p.m.
CVE-2023-37255
2023-06-2916:15:10
Google
osv.dev
5
checkuser
mediawiki
html injection
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
30.2%
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the “get edits” type is vulnerable to HTML injection through the User-Agent HTTP request header.
References
Related
cvelist
cvelist
CVE-2023-37255
2023-06-29 00:00:00
osv
osv
BIT-mediawiki-2023-37255
2024-03-06 11:00:40
nvd
nvd
CVE-2023-37255
2023-06-29 16:15:10
prion
prion
Design/Logic Flaw
2023-06-29 16:15:00
cve
cve
CVE-2023-37255
2023-06-29 16:15:10
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
30.2%
Related for OSV:CVE-2023-37255