BIT-MEDIAWIKI-2021-42041

An issue was discovered in CentralAuth in MediaWiki through 1.36.2. The rightsnone MediaWiki message was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the setchange log...

MediaWiki 跨站脚本漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy in-house knowledge management and content management systems.CentralAuth is one of the extensions that supports shared global accounts. A security vulnerabilit...

PT-2021-23480 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.36.3 Description: An issue was discovered in CentralAuth in MediaWiki where the rightsnone MediaWiki message was not being properly sanitized. This allowed for the injection and execution of HTML and JavaScript v...