CVE-2025-53369 in mediawiki-extensions-ShortDescriptionالمعلومات

الملخص

بحسب MITRE • 03/07/2025

Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized before being inserted as HTML using mw.util.addSubtitle, allowing any user to insert arbitrary HTML into the DOM by editing a page. This issue has been patched in version 4.0.1.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

مسؤول

GitHub M

حجز

27/06/2025

إفشاء

03/07/2025

الاعتدال

تمت الموافقة

إدخال

VDB-314828

EPSS

0.00289

KEV

لا

النشاطات

منخفض جدًا

المصادر

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!