Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2024-23172

An issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS can occur via message definitions. e.g., in SpecialCheckUserLog.

  • Published: Jan 12, 2024
  • Updated: Jan 19, 2024
  • CVE: CVE-2024-23172
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mediawiki / mediawiki - 1.35.14
mediawiki / mediawiki 1.36.0 1.39.6
mediawiki / mediawiki 1.40.0 1.40.2