PT-2020-5806 · Mediawiki+1 · Mediawiki+1

Umherirrender · Published 2020-11-28 · Updated 2024-03-06 · CVE-2020-35475

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.1

Description: The issue is related to the messages userrights-expiry-current and userrights-expiry-none containing raw HTML, which can lead to XSS when a user visits Special:UserRights without having the rights to change all userrights, and the table on the left side has unchangeable groups in it. The right column with the changeable groups is not affected and is escaped correctly.

Recommendations: For MediaWiki versions prior to 1.35.1, update to version 1.35.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Special:UserRights page until the update is applied.

Fix

XSS

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-79

CWE-116

Related Identifiers

ALT-PU-2020-3554

ALT-PU-2020-3568

BDU:2021-01772

BIT-MEDIAWIKI-2020-35475

CVE-2020-35475

DSA-4816-1

MGASA-2021-0086

Affected Products

Alt Linux

Mediawiki

References · 25

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC · Vendor Advisory
• https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35475 · Security Note
• https://advisories.mageia.org/MGASA-2021-0086.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-35475 · Vendor Advisory
• https://debian.org/security/2020/dsa-4816 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-35475 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35475 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01772 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-35475 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-35475 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-35475 · Security Note
• https://osv.dev/vulnerability/DSA-4816-1 · Vendor Advisory