Unauthorized Access to AbuseFilter Logs in MediaWiki - CVE-2024-47913
Summary
CVE-2024-47913: An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. Affects mediawiki across 2 version ranges.
< 1:1.39.10-1~deb12u1
< 35e6747afdebbf565d03bfc261c547a9cbad6e70
Fixed in 1:1.39.10-1~deb12u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MediaWiki is a widely-used open-source wiki software platform that enables users to create and manage collaborative content. It is known for its extensibility and flexibility, allowing various extensions to enhance its functionality. The AbuseFilter extension is designed to help users detect and prevent abusive editing behavior. However, a vulnerability has been identified in this extension, which could allow unauthorized API callers to access sensitive log details.
Vulnerability Detail
CVE-2024-47913 is a vulnerability in the AbuseFilter extension for MediaWiki that affects versions prior to 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. The issue arises when an API caller can match a filter condition against AbuseFilter logs without proper authorization to view those log details. This could lead to unauthorized exposure of sensitive information, potentially compromising user privacy and security.
How To Fix
Minimum fixed version
1:1.39.10-1~deb12u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mediawikiTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patches as soon as possible.
Conclusion
CVE-2024-47913 poses a significant risk to MediaWiki installations using the AbuseFilter extension, allowing unauthorized access to sensitive log details. It is imperative to update to the patched versions to ensure the security and privacy of users. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the integrity of your software.
See every vulnerability recorded for mediawiki →
FAQ
CVE-2024-47913 is a vulnerability in the AbuseFilter extension of MediaWiki that allows unauthorized API callers to access filter log details.
The vulnerability affects MediaWiki versions before 1.39.9, 1.40.x, 1.41.x before 1.41.3, and 1.42.x before 1.42.2.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The vulnerability could lead to unauthorized access to sensitive log information, compromising user privacy and security.
While there are no specific workarounds, it is crucial to prioritize updating your installation to mitigate the risk associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for mediawiki.
