Daimona

Name of the Vulnerable Software and Affected Versions Mediawiki - CampaignEvents Extension versions 1.43.7, 1.44.4, and 1.45.2 Description The Wikimedia Foundation Mediawiki - CampaignEvents Extension is susceptible to a cross-site scripting (XSS) issue due to improper input neutralization during web page generation. This allows for the injection of malicious scripts into web pages viewed by other users. Recommendations Update to a newer version of the Mediawiki - CampaignEvents Extension that addresses this issue. As a temporary workaround, carefully sanitize all user-supplied input before rendering it in web pages.

**Name of the Vulnerable Software and Affected Versions** MediaWiki - CampaignEvents extension versions 1.39 through 1.45 **Description** A missing authorization flaw exists in the Wikimedia Foundation MediaWiki - CampaignEvents extension, potentially allowing privilege abuse. The issue relates to the CampaignEvents API, where missing authorization could expose meeting and chat URLs. **Recommendations** Update to a version later than 1.45. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Mediawiki - CampaignEvents Extension versions 1.43.X through 1.43.1 Description: The issue affects the Mediawiki - CampaignEvents Extension, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Recommendations: For Mediawiki - CampaignEvents Extension versions 1.43.X through 1.43.1, update to version 1.43.2 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.12 MediaWiki versions prior to 1.42.6 MediaWiki versions prior to 1.43.1 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This affects program files, specifically includes/htmlform/fields/HTMLMultiSelectField.php. Recommendations: For versions prior to 1.39.12, update to version 1.39.12 or later. For versions prior to 1.42.6, update to version 1.42.6 or later. For versions prior to 1.43.1, update to version 1.43.1 or later.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.35.14 MediaWiki versions 1.36.x through 1.39.x before 1.39.6 MediaWiki versions 1.40.x before 1.40.2 **Description** The issue is related to the CampaignEvents extension in MediaWiki, which is associated with improper input neutralization during web page creation. This can allow a remote attacker to perform cross-site scripting attacks. The Special:EventDetails page is vulnerable to XSS via the x-xss language setting for internationalization. **Recommendations** For MediaWiki versions prior to 1.35.14, update to version 1.35.14 or later. For MediaWiki versions 1.36.x through 1.39.x before 1.39.6, update to version 1.39.6 or later. For MediaWiki versions 1.40.x before 1.40.2, update to version 1.40.2 or later. As a temporary workaround, consider restricting access to the Special:EventDetails page until a patch is available.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.40.2 Phonos extension in MediaWiki versions prior to 1.40.2 **Description** The issue exists due to the lack of protection for the web page structure in the Phonos extension of MediaWiki. This allows a remote attacker to perform cross-site scripting attacks via the `phonos-purge-needed-error` message. The vulnerability is related to the `PhonosButton.js` file, which enables i18n-based XSS attacks. **Recommendations** For MediaWiki versions prior to 1.40.2, update to version 1.40.2 or later to resolve the issue. As a temporary workaround, consider disabling the `PhonosButton.js` file until a patch is available. Restrict access to the `phonos-purge-needed-error` message to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.35.11 MediaWiki versions 1.36.x through 1.38.x before 1.38.7 MediaWiki versions 1.39.x before 1.39.4 MediaWiki versions 1.40.x before 1.40.1 **Description** The issue is related to a possibility of using XSS in the partial blocks feature of MediaWiki. This could allow a remote attacker to perform cross-site scripting attacks. The vulnerability is located in the BlockLogFormatter.php file within the BlockLogFormatter. **Recommendations** For MediaWiki versions prior to 1.35.11, update to version 1.35.11 or later. For MediaWiki versions 1.36.x through 1.38.x before 1.38.7, update to version 1.38.7 or later. For MediaWiki versions 1.39.x before 1.39.4, update to version 1.39.4 or later. For MediaWiki versions 1.40.x before 1.40.1, update to version 1.40.1 or later. As a temporary workaround, consider disabling the partial blocks feature until a patch is available.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.37.3 MediaWiki versions 1.38.x prior to 1.38.1 **Description** An issue was discovered where the contributions-title, used on Special:Contributions, is used as a page title without escaping. This can cause problems in non-default configurations where a username contains HTML entities, as it won't be escaped. **Recommendations** For MediaWiki versions prior to 1.37.3, update to version 1.37.3 or later. For MediaWiki versions 1.38.x prior to 1.38.1, update to version 1.38.1 or later.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions through 1.35.2 AbuseFilter extension for MediaWiki versions through 1.35.2 **Description** An issue in the AbuseFilter extension for MediaWiki improperly handled account blocks for certain automatically created MediaWiki user accounts. This allowed malicious users to remain unblocked. **Recommendations** For MediaWiki versions through 1.35.2, update to a version that includes a fix for the issue in the AbuseFilter extension. For the AbuseFilter extension for MediaWiki versions through 1.35.2, update the extension to a version that properly handles account blocks for automatically created user accounts.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions through 1.35.2 AbuseFilter extension for MediaWiki through 1.35.2 **Description** An issue in the AbuseFilter extension for MediaWiki allows the disclosure of suppressed MediaWiki usernames to unprivileged users through the Special:AbuseFilter/examine form. **Recommendations** For MediaWiki versions through 1.35.2, update to a version that contains a fix for this issue. For the AbuseFilter extension, restrict access to the Special:AbuseFilter/examine form until a patch is available.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions through 1.35.2 **Description** An issue was discovered in the AbuseFilter extension for MediaWiki, allowing a MediaWiki user who is partially blocked or was unsuccessfully blocked to bypass AbuseFilter and have their edits completed. **Recommendations** For versions through 1.35.2, update to a version that contains a fix for this issue to prevent users from bypassing AbuseFilter.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions through 1.35.1 GlobalUsage extension for MediaWiki versions through 1.35.1 **Description** An issue was discovered in the GlobalUsage extension for MediaWiki. The `SpecialGlobalUsage.php` file calls `WikiMap::makeForeignLink` unsafely. The `$page` variable within the `formatItem` function was not being properly escaped, allowing for XSS under certain conditions. **Recommendations** For MediaWiki versions through 1.35.1, update to a version that properly escapes the `$page` variable within the `formatItem` function to prevent XSS. For the GlobalUsage extension, ensure that the `WikiMap::makeForeignLink` function is called safely and the `$page` variable is properly escaped to mitigate the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions through 1.35 **Description** The issue allows for XSS via a qbfind message supplied by an administrator in the CologneBlue skin. This can be exploited when an administrator supplies a malicious qbfind message. **Recommendations** For versions through 1.35, update to a version that contains a fix for this issue to prevent XSS exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.