CVE-2020-25812: MediaWiki - XSS Vulnerability on Special:Contributions
Summary
CVE-2020-25812: An issue was discovered in MediaWiki 1.34.x before 1.34.4. Affects mediawiki versions >= 1.34.0, < 1.34.4. Fixed in 1.34.4. How to fix ↓
Also tracked for
- mediawiki/core · Packagist
- mediawiki · Debian:11
The same CVE-2020-25812 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MediaWiki is an open-source wiki software used to power various websites, including Wikipedia. It provides a platform for collaborative editing and content management. The vulnerability affects MediaWiki versions 1.34.x before 1.34.4. Special:Contributions is a page in MediaWiki that displays a user's contributions to the wiki. The NS filter on this page uses unescaped messages as keys in the option key for an HTMLForm specifier.
Vulnerability Detail
The vulnerability in MediaWiki allows for a mild cross-site scripting (XSS) attack. If an attacker modifies one of the messages used as keys in the NS filter to include raw HTML, it can be executed when the page is rendered. This can potentially lead to unauthorized access, data theft, or other malicious activities depending on the attacker's intentions.
How To Fix
Minimum fixed version
1.34.4
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading is not immediately possible, a temporary workaround is to disable the NS filter on the Special:Contributions page. This can be done by modifying the MediaWiki configuration or by applying a patch that disables the filter. However, this workaround should only be considered as a temporary solution, and upgrading to the latest version is still strongly recommended.
Conclusion
The XSS vulnerability in MediaWiki versions 1.34.x before 1.34.4 on the Special:Contributions page can be mitigated by upgrading to version 1.34.4 or later. If immediate upgrading is not possible, a temporary workaround is available by disabling the NS filter. It is important to prioritize the security of your MediaWiki installation and take necessary steps to protect against potential attacks. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for mediawiki →
FAQ
The vulnerability allows for a mild XSS attack, which can potentially lead to unauthorized access, data theft, or other malicious activities.
You can use the Vulert Playground at Vulert Scanner to check if your MediaWiki installation is affected by this vulnerability. Simply upload your package-lock.json file and it will provide real-time alerts for open-source vulnerabilities.
Yes, a patch is available in MediaWiki version 1.34.4. It is recommended to upgrade to this version to fix the vulnerability.
A temporary workaround is to disable the NS filter on the Special:Contributions page. However, this should only be considered as a temporary solution, and upgrading to the latest version is still strongly recommended.
You can find more information about this vulnerability in the official CVE entry: CVE-2020-25812.
Related vulnerabilities
Recent vulnerabilities recorded for mediawiki.
