PT-2019-5230 · Mediawiki+1 · Mediawiki+1

Bugreporter · Published 2019-12-10 · Updated 2023-02-01 · CVE-2019-19709

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.33.1

Description The issue allows attackers to bypass the Title blacklist protection mechanism. This can be achieved by starting with an arbitrary title, establishing a non-resolvable redirect for the associated page, and using redirect=1 in the "action API" when editing that page. The vulnerability is related to redirecting URLs to untrusted sites, which can allow a remote attacker to gain unauthorized access to confidential data and impact data integrity.

Recommendations For MediaWiki versions prior to 1.33.1, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting the use of the redirect=1 parameter in the action API until a patch is available.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

ALT-PU-2019-3367

ALT-PU-2020-2249

BDU:2020-01973

CVE-2019-19709

DSA-4592-1

GHSA-PJV5-VV93-P648

MGASA-2020-0021

Affected Products

Alt Linux

Mediawiki

References · 39

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-19709.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-10960.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-16738.yaml · Exploit
• 🔥 https://phabricator.wikimedia.org/T239466 · Exploit
• 🔥 https://gerrit.wikimedia.org/r/q/Ie54f366986056c876eade0fcad6c41f70b8b8de8 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2019-19709 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-19709 · Security Note
• https://osv.dev/vulnerability/GHSA-pjv5-vv93-p648 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19709 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19709 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19709 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4592-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4592-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/mediawiki · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16738 · Security Note