Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Apex skin allows Stored XSS.This issue affects Mediawiki - Apex skin: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.
References
| Link | Resource |
|---|---|
| https://phabricator.wikimedia.org/T368628 | Issue Tracking Vendor Advisory |
| https://phabricator.wikimedia.org/T370081 | Exploit Issue Tracking Vendor Advisory |
| https://gerrit.wikimedia.org/r/q/Id9093783051c3f8e6dcb5dc89f9493a5f5cf7bd7 | Patch |
Configurations
Configuration 1 (hide)
|
History
16 Oct 2024, 16:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://phabricator.wikimedia.org/T370081 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://phabricator.wikimedia.org/T368628 - Issue Tracking, Vendor Advisory | |
| References | () https://gerrit.wikimedia.org/r/q/Id9093783051c3f8e6dcb5dc89f9493a5f5cf7bd7 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
| CWE | CWE-79 | |
| First Time |
Wikimedia
Wikimedia apex |
|
| CPE | cpe:2.3:a:wikimedia:apex:*:*:*:*:*:*:*:* |
05 Oct 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-05 01:15
Updated : 2024-10-16 16:44
NVD link : CVE-2024-47840
Mitre link : CVE-2024-47840
JSON object : View
Products Affected
wikimedia
- apex
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')