Lucene search
+L

1 matches found

OSV
OSV
added 2021/02/19 10:27 a.m.7 views

MGASA-2021-0086 Updated mediawiki packages fix security vulnerability

In MediaWiki before 1.31.11, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. The right colu...

7.5CVSS6.7AI score0.01573EPSS
SaveExploits2References5
Rows per page
Query Builder