CVEvulnerability
CVE-2020-35475
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-79
Description
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to change all userrights, and the table on the left side has unchangeable groups in it. (The right column with the changeable groups is not affected and is escaped correctly.)
Affected configurations
• mediawiki mediawiki (< 1.35.1)
• debian debian linux 10.0
• fedoraproject fedora 33
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/ lists.fedoraproject.org
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html Mailing List, Release Notes, Vendor Advisory
- https://phabricator.wikimedia.org/T268917 Issue Tracking, Third Party Advisory
- https://www.debian.org/security/2020/dsa-4816 Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STT5Z4A3BCXVH3WIPICWU2FP4IPIMUPC/ lists.fedoraproject.org
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-December/000268.html Mailing List, Release Notes, Vendor Advisory
- https://phabricator.wikimedia.org/T268917 Issue Tracking, Third Party Advisory
- https://www.debian.org/security/2020/dsa-4816 Third Party Advisory