Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-23173
HistoryJan 12, 2024 - 5:15 a.m.

Design/Logic Flaw

2024-01-1205:15:00
PRIOn knowledge base
www.prio-n.com
4
mediawiki
cargo extension
xss
special:drilldown
cargoappliedfilter.php
vulnerability

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php.

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

Related for PRION:CVE-2024-23173