11 matches found
CVE-2026-77609
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without...
CVE-2026-77609 Semantic MediaWiki has an open redirect in Special:URIResolver
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without...
EUVD-2026-83183
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without...
CVE-2026-77609 Semantic MediaWiki has an open redirect in Special:URIResolver
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without...
CVE-2026-77609
Semantic MediaWiki (open-source MediaWiki extension) prior to version 7.2.0 contains an open redirect in Special:URIResolver. The page resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title->getFullURL() without validating the resolved target , allo...
CVE-2026-77609 Semantic MediaWiki has an open redirect in Special:URIResolver
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without...
GHSA-HW3M-8J5X-94FF Semantic MediaWiki has an open redirect in Special:URIResolver
Failure mode Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without validating the resolved target. A crafted subpage can make that target point off-host: an interwiki prefix redirects to the foreign wiki for...
Semantic MediaWiki has an open redirect in Special:URIResolver
Failure mode Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without validating the resolved target. A crafted subpage can make that target point off-host: an interwiki prefix redirects to the foreign wiki for...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the Special:URIResolver process. An attacker can redirect users to an external, attacker-controlled site by crafting a subpage that resolves to an off-host URL, potentially embedding credentials in the target and...
CVE-2026-77609: URL Redirection to Untrusted Site
Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without...
PT-2026-95516
Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0 Description Special:URIResolver resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to $title-getFullURL without validating the resolved target. A crafted subpage...