PT-2020-5805 · Mediawiki+1 · Mediawiki+1

Umherirrender · Published 2020-11-29 · Updated 2024-03-06 · CVE-2020-35479

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: MediaWiki versions 1.12.0 through 1.35.0

Description: The issue is related to insufficient protection measures in the BlockLogFormatter.php component of MediaWiki, allowing a remote attacker to compromise data integrity. The problem lies in the Language::translateBlockExpiry function not escaping in all code paths, making the return of Language::userTimeAndDate unsafe for HTML, particularly in month values.

Recommendations: For MediaWiki versions 1.12.0 through 1.35.0, update to version 1.35.1 or later to resolve the issue. As a temporary workaround, consider disabling the Language::translateBlockExpiry function until a patch is available. Restrict access to the BlockLogFormatter.php component to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2020-3554

ALT-PU-2020-3568

BDU:2021-01770

BIT-MEDIAWIKI-2020-35479

CVE-2020-35479

DLA-2504-1

DSA-4816-1

MGASA-2021-0086

Affected Products

Alt Linux

Mediawiki

References · 30

• 🔥 https://phabricator.wikimedia.org/T268938 · Exploit
• https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0086 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-35479 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-35479 · Vendor Advisory
• https://debian.org/security/2020/dsa-4816 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2504-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-35479 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35479 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mediawiki-2020-35479 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-35479 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0086.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01770 · Security Note