PT-2020-16222 · Wikimedia+1 · Mediawiki+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-25814

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.31.10 and earlier MediaWiki versions 1.32.x through 1.34.x before 1.34.4

Description The issue is related to XSS in MediaWiki, where an attacker can create a message with a malicious payload and turn it into a jQuery object using mw.message().parse(). This results in a jQuery object containing an <a> tag with a href attribute set to javascript:payload, which executes when clicked.

Recommendations For MediaWiki versions 1.31.10 and earlier, update to version 1.31.10 or later. For MediaWiki versions 1.32.x through 1.34.x before 1.34.4, update to version 1.34.4 or later. As a temporary workaround, consider restricting the use of the mw.message().parse() function until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2020-3022

ALT-PU-2020-3055

BIT-MEDIAWIKI-2020-25814

CVE-2020-25814

DLA-2379-1

DSA-4767-1

GHSA-4VR7-M8P8-434H

MGASA-2020-0381

Affected Products

Alt Linux

Mediawiki

References · 27

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25814.yaml · Exploit
• https://osv.dev/vulnerability/DSA-4767-1 · Vendor Advisory
• https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25814 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4vr7-m8p8-434h · Vendor Advisory
• https://mediawiki.org/wiki/ResourceLoader/Core_modules#mediawiki.jqueryMsg · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-25814 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mediawiki-2020-25814 · Vendor Advisory
• https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25814 · Security Note
• https://osv.dev/vulnerability/DLA-2379-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-25814 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-25814 · Vendor Advisory