Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25584
HistoryJun 03, 2020 - 4:27 a.m.

Open Redirection

2020-06-0304:27:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.002 Low

EPSS

Percentile

55.5%

mediawiki is vulnerable to open redirection. Having duplicate DOM query in the resources/src/mediawiki.page.ready/ready.js on a logout click allows an attacker to force a logout and external redirection of the usere using HTML content in a MediaWiki page.

CPENameOperatorVersion
mediawiki/corele1.34.0