PT-2024-26910 · Citizen · Citizen

Blankeclair · Published 2024-06-03 · Updated 2024-06-03 · CVE-2024-36123

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Citizen versions prior to 2.16.0

Description The Citizen MediaWiki skin is affected by an issue where the page MediaWiki:Tagline has its contents used unescaped, allowing custom HTML (including Javascript) to be injected by someone with the ability to edit the MediaWiki namespace, typically those with the editinterface permission, or sysops.

Recommendations For versions prior to 2.16.0, update to version 2.16.0 to resolve the issue. As a temporary workaround, consider restricting access to the MediaWiki:Tagline page to minimize the risk of exploitation. Additionally, limiting the editinterface permission to trusted users can help mitigate the risk.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-36123

GHSA-JHM6-QJHQ-5MF9

Affected Products

Citizen

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36123.json · Exploit
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-jhm6-qjhq-5mf9 · Vendor Advisory
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/4a43280242f33e54643087da4a7f40970d2640c9 · Patch
• https://ubuntu.com/security/CVE-2024-36123 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-36123 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36123 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-36123 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-36123 · Vendor Advisory
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases · Note
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/blob/c11fbf67a99366d5a40ef880469b222679e3b475/includes/Components/CitizenComponentPageHeading.php#L197-L201 · Note
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/blob/c11fbf67a99366d5a40ef880469b222679e3b475/includes/Components/CitizenComponentPageHeading.php#L190-L195 · Note
• https://t.me/cvenotify/81791 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1797667647380742261 · Twitter Post
• https://twitter.com/CVEnew/status/1797637018958098731 · Twitter Post