MediaWiki up to 1.34 Logout ready.js HTML Content redirect

Summaryinfo

A vulnerability was found in MediaWiki up to 1.34. It has been classified as problematic. This issue affects some unknown processing of the file resources/src/mediawiki.page.ready/ready.js of the component Logout Handler. The manipulation as part of HTML Content leads to redirect. This vulnerability is documented as CVE-2020-10959. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in MediaWiki up to 1.34 (Content Management System). It has been rated as critical. This issue affects an unknown code block of the file resources/src/mediawiki.page.ready/ready.js of the component Logout Handler. The manipulation as part of a HTML Content leads to a redirect vulnerability. Using CWE to declare the problem leads to CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.

The weakness was released 06/02/2020. The identification of this vulnerability is CVE-2020-10959 since 03/25/2020. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1204.001 according to MITRE ATT&CK.

Upgrading to version 1.35 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• MediaWiki

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34

License

• open-source

Website

• Product: https://www.mediawiki.org/wiki/MediaWiki

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion