Wikibase Wikidata Query Service GUI HTML Injection Vulnerability

Wikibase Wikidata Query Service GUI is a graphical user interface for the Wikidata wikidata query service. A security vulnerability exists in the ui/editor/tooltip/Rdf.js file in versions prior to Wikibase Wikidata Query Service GUI 0.3.6-SNAPSHOT 2019-11-07. An attacker can exploit the...

Unspecified Vulnerability in Wikibase Wikidata Query Service GUI

Wikibase Wikidata Query Service GUI is a graphical user interface for the Wikidata wikidata query service. A security vulnerability exists in the ui/ResultView.js file in versions prior to Wikibase Wikidata Query Service GUI 0.3.6-SNAPSHOT 2019-11-07. An attacker can exploit the vulnerability to...

Design/Logic Flaw

ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of results and number of milliseconds. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT...

CVE-2019-19329: Improper Neutralization of Input During Web Page Generation

In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no...