Lucene search
Veracode Vulnerability DatabaseVERACODE:45018HistoryJan 13, 2024 - 2:39 a.m.
Cross Site Scripting(XSS)
2024-01-1302:39:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
cross site scripting
mediawiki
load special:log/rights
administrator account
url manipulation
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
20.6%
mediawiki:sid is vulnerable to cross site scripting. The vulnerability due to Load Special:log/rights script by using an administrator account. it allows an attacker can change URL ends with &uselang;=x-xss which leads to XSS.
Related
prion
prion
Cross site scripting
2023-12-22 02:15:00
osv
osv
mediawiki - security update
2024-04-27 00:00:00
BIT-mediawiki-2023-51704
2024-03-06 10:57:11
CVE-2023-51704
2023-12-22 02:15:42
redos
redos
ROS-20240408-19
2024-04-08 00:00:00
nessus
nessus
Debian dla-3896 : mediawiki - security update
2024-09-26 00:00:00
Debian dla-3796 : mediawiki - security update
2024-04-28 00:00:00
openvas
openvas
MediaWiki < 1.35.14, 1.36.x < 1.39.6, 1.40.x < 1.40.2 XSS Vulnerability - Windows
2023-12-27 00:00:00
Debian: Security Advisory (DLA-3796-1)
2024-04-29 00:00:00
cvelist
cvelist
CVE-2023-51704
2023-12-22 00:00:00
debian
debian
[SECURITY] [DLA 3796-1] mediawiki security update
2024-04-27 16:55:17
nvd
nvd
CVE-2023-51704
2023-12-22 02:15:42
debiancve
debiancve
CVE-2023-51704
2023-12-22 02:15:42
cve
cve
CVE-2023-51704
2023-12-22 02:15:42
ubuntucve
ubuntucve
CVE-2023-51704
2023-12-22 00:00:00
redhatcve
redhatcve
CVE-2023-51704
2023-12-22 06:30:48
fedora
fedora
[SECURITY] Fedora 40 Update: php-oojs-oojs-ui-0.48.1-1.fc40
2024-05-11 01:32:03
[SECURITY] Fedora 40 Update: php-wikimedia-cdb-3.0.0-1.fc40
2024-05-11 01:32:03
[SECURITY] Fedora 40 Update: php-wikimedia-utfnormal-4.0.0-1.fc40
2024-05-11 01:32:03
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2024-05-01 01:25:14
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
20.6%
Related for VERACODE:45018