PT-2020-16223 · Wikimedia+1 · Mediawiki+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-25815

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.32.x through 1.34.x before 1.34.4

Description An issue was discovered where the LogEventList::getFiltersDesc function is insecurely using message text to build options names for an HTML multi-select field. The relevant code should use escaped() instead of text().

Recommendations For MediaWiki versions 1.32.x through 1.34.x before 1.34.4, update to version 1.34.4 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2020-3022

ALT-PU-2020-3055

BIT-MEDIAWIKI-2020-25815

CVE-2020-25815

DSA-4767-1

GHSA-2F58-VF6G-6P8X

MGASA-2020-0381

Affected Products

Alt Linux

Mediawiki

References · 25

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-25815.yaml · Exploit
• https://osv.dev/vulnerability/DSA-4767-1 · Vendor Advisory
• https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mediawiki-2020-25815 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6 · Vendor Advisory
• https://gerrit.wikimedia.org/g/mediawiki/core/+/ec76e14be658187544f07c1a249a047e1a75eaf8/includes/logging/LogEventsList.php#214 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2f58-vf6g-6p8x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25815 · Security Note
• https://lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-25815 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-25815 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25815 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0381 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25815 · Vendor Advisory