PT-2024-32813 · Mediawiki · Createwiki

Blankeclair · Published 2024-10-07 · Updated 2024-11-14 · CVE-2024-47781

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CreateWiki (affected versions not specified)

Description The issue concerns the CreateWiki extension used for requesting and creating wikis, where the name of requested wikis is not properly escaped on the Special:RequestWikiQueue page. This allows a user to insert arbitrary HTML, which can be displayed in the request wiki queue. If a wiki creator encounters the malicious payload, their user session can be exploited to retrieve deleted wiki requests containing private information. Similarly, this can be abused to view sensitive information by those with the ability to suppress requests.

Recommendations To resolve the issue, apply the patch with commit 693a220. As a temporary workaround, consider disabling Javascript and/or preventing access to the vulnerable page Special:RequestWikiQueue until the patch is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-47781

GHSA-H527-JH77-5G7J

Affected Products

Createwiki

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47781.json · Exploit
• https://github.com/miraheze/CreateWiki/commit/693a220f399ee7eb4d00e77c3c667e864b1bd306 · Patch
• https://github.com/miraheze/CreateWiki/security/advisories/GHSA-h527-jh77-5g7j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47781 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47781 · Vendor Advisory
• https://t.me/cvenotify/97370 · Telegram Post
• https://twitter.com/CVEnew/status/1843406203105296834 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1843458846607516063 · Twitter Post
• https://issue-tracker.miraheze.org/T12693 · Note
• https://t.me/cvedetector/7294 · Telegram Post