PT-2024-20752 · Unknown · Wikidiscover

Universal-Omega · Published 2024-02-08 · Updated 2024-02-15 · CVE-2024-25107

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WikiDiscover (affected versions not specified)

Description The issue arises from the use of the Language::date function on Special:WikiDiscover, which utilizes unescaped interface messages to translate month and day names. This results in an XSS vulnerability when the unescaped interface message is included in the output. Exploiting this vulnerability on-wiki requires the (editinterface) right.

Recommendations Update the WikiDiscover extension to a version that includes the fix committed in 267e763a0. As a temporary workaround, consider restricting the (editinterface) right to minimize the risk of exploitation. Avoid using the Language::date function until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-25107

GHSA-CFCF-94JV-455F

Affected Products

Wikidiscover

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25107.json · Exploit
• https://github.com/miraheze/WikiDiscover/security/advisories/GHSA-cfcf-94jv-455f · Vendor Advisory
• https://github.com/miraheze/WikiDiscover/commit/267e763a0d7460f001693c42f67717a0fc3fd6bb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-25107 · Security Note
• https://issue-tracker.miraheze.org/T11814 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-25107 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1755774027631571208 · Twitter Post
• https://twitter.com/CVEnew/status/1755726556239151214 · Twitter Post