CVE-2020-9382

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki

published February 24, 2020

CVSS
—
EPSS
1%
Percentile
61.6
In the wild
Unconfirmed
What it is

An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00971 · 61.6th percentile
Published
2020-02-24T22:17Z
EPSS history
Timeline
  • 24 FEB 22:17Z
    An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki
    cvelistv5