PT-2019-5230 · Mediawiki+1 · Mediawiki+1

Bugreporter · Publicado 2019-12-10 · Atualizado 2023-02-01 · CVE-2019-19709

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.33.1

Description The issue allows attackers to bypass the Title blacklist protection mechanism. This can be achieved by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the "action API" when editing that page. The vulnerability is related to redirecting URLs to untrusted sites, which can allow a remote attacker to gain unauthorized access to confidential data and impact data integrity.

Recommendations For MediaWiki versions prior to 1.33.1, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting the use of the redirect=1 parameter in the action API until a patch is available.

Exploit

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

ALT-PU-2019-3367

ALT-PU-2020-2249

BDU:2020-01973

CVE-2019-19709

DSA-4592-1

GHSA-PJV5-VV93-P648

MGASA-2020-0021

Produtos afetados

Alt Linux

Mediawiki

Referências · 39

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-19709.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-10960.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-16738.yaml · Exploit
• 🔥 https://phabricator.wikimedia.org/T239466 · Exploit
• 🔥 https://gerrit.wikimedia.org/r/q/Ie54f366986056c876eade0fcad6c41f70b8b8de8 · Exploit
• https://github.com/wikimedia/mediawiki · Nota
• https://security-tracker.debian.org/tracker/CVE-2019-19709 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-19709 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-pjv5-vv93-p648 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19709 · Nota
• https://seclists.org/bugtraq/2019/Dec/48 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19709 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19709 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-19709 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/DSA-4592-1 · Aviso do Fabricante