CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 3:28 a.m.•5 views

CVE-2023-37255

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vulnerable to HTML injection through the User-Agent HTTP request header...

6.1CVSS6.9AI score0.00467EPSS

Exploits1

NVD•added 2023/06/29 4:15 p.m.•24 views

CVE-2023-37255

6.1CVSS6.4AI score0.00467EPSS

Exploits1References1

Cvelist•added 2023/06/29 12:0 a.m.•27 views

CVE-2023-37255

6.5AI score0.00467EPSS

Exploits1References1

CVE•added 2023/06/29 12:0 a.m.•50 views

CVE-2023-37255

CVE-2023-37255 concerns the MediaWiki CheckUser extension (up to 1.39.3). In Special:CheckUser, the check of type “get edits” is vulnerable to HTML injection via the User-Agent HTTP header . The vulnerability’s impact is limited to scenarios where user-supplied User-Agent data influences the HTML...

6.1CVSS6.3AI score0.00467EPSS

Exploits1References1Affected Software1