CVEvulnerability
CVE-2020-29007
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-04-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-94
Description
The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. This allows any user with an ability to edit articles (potentially including unauthenticated anonymous users) to execute arbitrary Scheme or shell code by using crafted {{Image data to generate musical scores containing malicious code.
Affected configurations
• mediawiki score (<= 0.3.0)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://github.com/seqred-s-a/cve-2020-29007 Exploit, Mitigation, Third Party Advisory
- https://phabricator.wikimedia.org/T257062 Exploit, Third Party Advisory
- https://seqred.pl/en/cve-2020-29007-remote-code-execution-in-mediawiki-score/ Exploit, Third Party Advisory
- https://www.mediawiki.org/wiki/Extension:Score Vendor Advisory
- https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory Vendor Advisory
- https://github.com/seqred-s-a/cve-2020-29007 Exploit, Mitigation, Third Party Advisory
- https://phabricator.wikimedia.org/T257062 Exploit, Third Party Advisory
- https://seqred.pl/en/cve-2020-29007-remote-code-execution-in-mediawiki-score/ Exploit, Third Party Advisory
- https://www.mediawiki.org/wiki/Extension:Score Vendor Advisory
- https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory Vendor Advisory