PT-2021-11621 · Mediawiki+1 · Mediawiki Push Extension+1

Tosfos · Published 2020-10-10 · Updated 2024-03-06 · CVE-2020-29004

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: MediaWiki Push extension versions through 1.35

Description: The issue concerns a lack of required edit token in the API of the Push extension for MediaWiki, specifically in ApiPushBase.php. This omission facilitates a CSRF attack.

Recommendations: For MediaWiki Push extension versions through 1.35, consider implementing proper validation and requirement of edit tokens in the API to prevent CSRF attacks. As a temporary workaround, consider restricting access to the ApiPushBase.php file until a proper fix is applied.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

ALT-PU-2020-3022

ALT-PU-2020-3055

BIT-MEDIAWIKI-2020-29004

CVE-2020-29004

Affected Products

Alt Linux

Mediawiki Push Extension

References · 8

• https://osv.dev/vulnerability/BIT-mediawiki-2020-29004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29004 · Security Note
• https://phabricator.wikimedia.org/T262724 · Vendor Advisory
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988 · Vendor Advisory
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Push/+/625988/10/src/api/ApiPushBase.php · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-29004 · Vendor Advisory
• https://t.me/cvenotify/9111 · Telegram Post
• https://t.me/cvenotify/9087 · Telegram Post