2 matches found
Security fix for the ALT Linux 9 package mediawiki-extensions-Widgets version 1.3.0-alt1git
1.3.0-alt1git built June 30, 2021 Vitaly Lipatov in task 274917 June 27, 2021 Vitaly Lipatov - new version 1.3.0 with rpmgs script - CVE-2020-9382, CVE-2020-35625...
CVE-2020-9382
The CVE-2020-9382 entry refers to the MediaWiki Widgets extension (versions up to 1.4.0). The issue is due to improper title sanitization, allowing any wiki page to be executed as a widget via the {{#widget:}} parser function. Affected component: Widgets extension for MediaWiki; root cause: title...