An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. XSS can occur because of mishandling of the 0x1b character, as demonstrated by Special:RecentChanges#%1b0000000.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/ | Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/ | Third Party Advisory |
| https://phabricator.wikimedia.org/T355538 | Exploit Issue Tracking Vendor Advisory |
| https://phabricator.wikimedia.org/T355538 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
17 Jun 2025, 16:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:* |
|
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU2FGUXXK6TMV6R52VRECLC6XCSQQISY/ - Third Party Advisory | |
| References | () https://phabricator.wikimedia.org/T355538 - Exploit, Issue Tracking, Vendor Advisory | |
| First Time |
Mediawiki
Fedoraproject Mediawiki mediawiki Fedoraproject fedora |
10 Jun 2024, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 May 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-05 19:15
Updated : 2025-06-17 16:37
NVD link : CVE-2024-34507
Mitre link : CVE-2024-34507
JSON object : View
Products Affected
mediawiki
- mediawiki
fedoraproject
- fedora
CWE
No CWE.