PT-2024-32827 · Mediawiki · Importdump

Blankeclair · Published 2024-10-09 · Updated 2024-10-10 · CVE-2024-47816

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions ImportDump (affected versions not specified)

Description The issue concerns the ImportDump mediawiki extension, which is designed to automate user import requests. A user's local actor ID is stored in the database to track who made what requests. However, if a user on another wiki has the same actor ID as someone on the central wiki, they can act as if they are the original wiki requester. This can be exploited to create new comments, edit requests, and view private requests.

Recommendations Update to a version that includes the fix from commit 5c91dfc. If an update is not possible, disable the special page outside of the global wiki, see miraheze/mw-config@e566499 for details.

Exploit

Fix

Weakness Enumeration

CWE-282

Related Identifiers

CVE-2024-47816

GHSA-JJMQ-MG36-6387

Affected Products

Importdump

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47816.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-47816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47816 · Security Note
• https://github.com/miraheze/mw-config/commit/e5664995fbb8644f9a80b450b4326194f20f9ddc · Note
• https://github.com/miraheze/ImportDump/commit/5c91dfce78320e717516ee65ef5a05f01979ee6c · Note
• https://github.com/miraheze/ImportDump/security/advisories/GHSA-jjmq-mg36-6387 · Note
• https://t.me/cvenotify/97677 · Telegram Post
• https://issue-tracker.miraheze.org/T12701 · Note
• https://twitter.com/CVEnew/status/1844086635283009568 · Twitter Post
• https://t.me/cvedetector/7520 · Telegram Post