PT-2025-4300 · Unknown · Tabberneue

Blankeclair · Published 2025-01-06 · Updated 2025-01-07 · CVE-2025-21612

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions TabberNeue versions prior to 2.7.2

Description The issue arises from unescaped user input being used to construct HTML, allowing any user who can edit pages or render wikitext to perform cross-site scripting (XSS) attacks on other users. Specifically, in TabberTransclude.php, the user-supplied page name is not escaped when outputting, enabling an XSS payload to be used as the page name. This vulnerability can be exploited by rendering malicious wikitext, potentially allowing an attacker to trick victims into clicking on links to Special:ExpandTemplates with the malicious wikitext in the wpInput parameter.

Recommendations For versions prior to 2.7.2, update to version 2.7.2 to patch this vulnerability. As a temporary workaround, consider restricting access to the TabberTransclude.php module to minimize the risk of exploitation. Additionally, avoid using unescaped user input in the wpInput parameter until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2025-21612

GHSA-4X6X-8RM8-C37J

Affected Products

Tabberneue

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21612.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-21612 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21612 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4x6x-8rm8-c37j · Vendor Advisory
• https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/security/advisories/GHSA-4x6x-8rm8-c37j · Note
• https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/d8c3db4e5935476e496d979fb01f775d3d3282e6 · Note
• https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue/commit/f229cab099c69006e25d4bad3579954e481dc566 · Note
• https://github.com/StarCitizenTools/mediawiki-extensions-TabberNeue · Note
• https://twitter.com/CveFindCom/status/1876298031902974357 · Twitter Post
• https://t.me/latest_high_impact_cve/1746 · Telegram Post
• https://t.me/cvedetector/14363 · Telegram Post
• https://twitter.com/BaseFortify/status/1876637838143541309 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1876311556742381705 · Twitter Post
• https://twitter.com/CVEnew/status/1876301869284270142 · Twitter Post