XSS Vulnerability in MediaWiki Contributions Page
Summary
CVE-2020-25812: An issue was discovered in MediaWiki 1.34.x before 1.34.4. Affects mediawiki across 2 version ranges.
< 1:1.35.0-1
>= 29977ebe4c05cab4cac46fd1a8459e27f50fb153, < e34e7f20b51ed7514ba6de8d8a390363ade2237f
Fixed in 1:1.35.0-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MediaWiki is a free and open-source wiki software platform used to power Wikipedia and other wikis. It allows users to create and edit content collaboratively. The platform is known for its extensibility and flexibility, supporting various extensions and skins. However, certain versions of MediaWiki are vulnerable to a cross-site scripting (XSS) attack due to improper handling of user input on the Special:Contributions page.
Vulnerability Detail
The vulnerability, identified as CVE-2020-25812, arises from the use of unescaped messages as keys in the option key for an HTMLForm specifier on the Special:Contributions page. If a message is altered to include raw HTML, it can lead to a mild XSS attack, allowing an attacker to execute arbitrary JavaScript in the context of the user's session. This could potentially compromise user data or lead to further exploitation of the application.
How To Fix
Minimum fixed version
1:1.35.0-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mediawikiTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict user permissions on the Special:Contributions page to limit exposure to this vulnerability until an upgrade can be performed. Additionally, ensure that user input is properly sanitized and validated to mitigate the risk of XSS attacks.
Conclusion
CVE-2020-25812 represents a significant security risk for users of MediaWiki versions prior to 1.34.4. It is crucial for administrators to upgrade their installations to mitigate the risk of XSS attacks. Regular monitoring and updates are essential to maintain the security of web applications.
See every vulnerability recorded for mediawiki →
FAQ
CVE-2020-25812 is a vulnerability in MediaWiki that allows for mild cross-site scripting (XSS) attacks due to improper handling of user input on the Special:Contributions page.
MediaWiki versions 1.34.x before 1.34.4 are affected by this vulnerability.
An attacker could exploit this vulnerability to execute arbitrary JavaScript in the context of a user's session, potentially compromising user data or leading to further exploitation.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. You can check for vulnerabilities without signup at the Vulert playground.
The CVSS score for CVE-2020-25812 is 6.1, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for mediawiki.
