What is GHSA-mqhw-wq8p-vf5r?

GHSA-mqhw-wq8p-vf5r is a security advisory published by GitHub Security Advisories with Medium severity. MediaWiki Open Redirect vulnerability

Which CVE IDs does GHSA-mqhw-wq8p-vf5r cover?

GHSA-mqhw-wq8p-vf5r covers the following CVE IDs: CVE-2020-10959. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mqhw-wq8p-vf5r?

GHSA-mqhw-wq8p-vf5r has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-mqhw-wq8p-vf5r?

GHSA-mqhw-wq8p-vf5r affects 1 product, including: composer/mediawiki/core:\u003c 1.34.0-rc.0.

GHSA-mqhw-wq8p-vf5rMediumCVSS 6.1

MediaWiki Open Redirect vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

May 15, 2024

🔗 CVE IDs covered (1)

CVE-2020-10959 →

📋 Description

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.34.0-rc.0 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.

🎯 Affected products1

composer/mediawiki/core:< 1.34.0-rc.0

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2020-10959
https://gerrit.wikimedia.org/r/c/mediawiki/core/+/536725
https://phabricator.wikimedia.org/T232932
https://phabricator.wikimedia.org/T240393
https://github.com/wikimedia/mediawiki/commit/d4a552e65bdfd7309a9b8537e9dbe69c5e2991eb
https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-10959.yaml
https://github.com/advisories/GHSA-mqhw-wq8p-vf5r