MediaWiki up to 1.32.x/1.34.3 getFiltersDesc Message cross site scripting

Summaryinfo

A vulnerability has been found in MediaWiki up to 1.32.x/1.34.3 and classified as problematic. This impacts the function LogEventList::getFiltersDesc. Performing a manipulation as part of Message results in cross site scripting. This vulnerability is cataloged as CVE-2020-25815. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as problematic, was found in MediaWiki up to 1.32.x/1.34.3 (Content Management System). This affects the function LogEventList::getFiltersDesc. The manipulation as part of a Message leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. This is going to have an impact on integrity. The summary by CVE is:

An issue was discovered in MediaWiki 1.32.x through 1.34.x before 1.34.4. LogEventList::getFiltersDesc is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().

The weakness was shared 09/27/2020 (Website). It is possible to read the advisory at lists.wikimedia.org. This vulnerability is uniquely identified as CVE-2020-25815 since 09/23/2020. It is possible to initiate the attack remotely. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

Upgrading to version 1.34.4 eliminates this vulnerability.

The entries VDB-162036, VDB-162037, VDB-162038 and VDB-162040 are related to this item. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• MediaWiki

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.34.0
• 1.34.1
• 1.34.2
• 1.34.3

License

• open-source

Website

• Product: https://www.mediawiki.org/wiki/MediaWiki

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion