PT-2023-29531 · Mediawiki+1 · Mediawiki+1

Published 2023-10-10 · Updated 2024-10-11 · CVE-2023-45361

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.39.5 MediaWiki versions 1.40.x prior to 1.40.1

Description An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component. A MalformedTitleException is uncaught if it is not a valid title, leading to incorrect web pages. Users are urged to update to the latest release to mitigate risks.

Recommendations For MediaWiki versions prior to 1.39.5, update to version 1.39.5 or later. For MediaWiki versions 1.40.x prior to 1.40.1, update to version 1.40.1 or later. As a temporary workaround, consider restricting access to the VectorComponentUserLinks.php file until a patch is available.

Fix

Related Identifiers

ALT-PU-2023-6419

ALT-PU-2024-11168

ALT-PU-2024-1228

CVE-2023-45361

DSA-5520-1

MGASA-2024-0155

Affected Products

Alt Linux

Mediawiki

References · 126

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45360 · Security Note
• https://security-tracker.debian.org/tracker/source-package/mediawiki · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22911 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22910 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45373 · Security Note
• https://bdu.fstec.ru/vul/2024-02749 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29197 · Security Note
• https://bdu.fstec.ru/vul/2024-02628 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37301 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29140 · Security Note
• https://errata.altlinux.org/ALT-PU-2024-1228 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45361 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45372 · Security Note
• https://bdu.fstec.ru/vul/2024-02755 · Security Note
• https://osv.dev/vulnerability/DSA-5520-1 · Vendor Advisory