PT-2023-25893 · Mediawiki+1 · Mediawiki+1

Michael · Published 2023-06-30 · Updated 2024-08-20 · CVE-2023-37302

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.39.3

Description An issue was discovered in SiteLinksView.php in Wikibase. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).

Recommendations For versions through 1.39.3, update to a version that includes the fix for the XSS issue in SiteLinksView.php and the lack of escaping in wbTemplate. As a temporary workaround, consider disabling the use of crafted badge title attributes until a patch is available. Restrict access to the wbTemplate function to minimize the risk of exploitation. Avoid using quotes in title attributes in the affected API endpoints until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2023-4877

ALT-PU-2024-11168

ALT-PU-2024-1228

BIT-MEDIAWIKI-2023-37302

CVE-2023-37302

GHSA-FMRF-P77G-VV5C

Affected Products

Alt Linux

Mediawiki

References · 113

• 🔥 https://phabricator.wikimedia.org/T339111 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22911 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22910 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45373 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29197 · Security Note
• https://bdu.fstec.ru/vul/2024-02749 · Security Note
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/933649 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02628 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37301 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29140 · Security Note
• https://errata.altlinux.org/ALT-PU-2024-1228 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-39193 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-37302 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45372 · Security Note