SportsTeams Extension up to 1.35.11/1.39.4/1.40.0 on MediaWiki Special:SportsTeamsManagerLogo permission

Summaryinfo

A vulnerability was found in SportsTeams Extension up to 1.35.11/1.39.4/1.40.0 on MediaWiki. It has been declared as critical. Affected is an unknown function of the file Special:SportsManagerLogo/Special:SportsTeamsManagerLogo. The manipulation results in permission. This vulnerability was named CVE-2023-45370. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in SportsTeams Extension up to 1.35.11/1.39.4/1.40.0 on MediaWiki. It has been classified as critical. Affected is some unknown processing of the file Special:SportsManagerLogo/Special:SportsTeamsManagerLogo. The manipulation with an unknown input leads to a permission vulnerability. CWE is classifying the issue as CWE-275. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams: Special:SportsManagerLogo and Special:SportsTeamsManagerLogo do not check for the sportsteamsmanager user right, and thus an attacker may be able to affect pages that are concerned with sports teams.

The weakness was presented 10/09/2023. The advisory is shared for download at gerrit.wikimedia.org. This vulnerability is traded as CVE-2023-45370 since 10/09/2023. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1222.

Upgrading to version 1.35.12, 1.39.5 or 1.40.1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-49662). Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• SportsTeams Extension

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.35.0
• 1.35.1
• 1.35.2
• 1.35.3
• 1.35.4
• 1.35.5
• 1.35.6
• 1.35.7
• 1.35.8
• 1.35.9
• 1.35.10
• 1.35.11
• 1.36
• 1.37
• 1.38
• 1.39
• 1.39.0
• 1.39.1
• 1.39.2
• 1.39.3
• 1.39.4
• 1.40.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion