An issue was discovered in CentralAuth in MediaWiki through 1.36.2
published October 6, 2021
CVSS
—
EPSS
1%
Percentile
62.0
In the wild
Unconfirmed
What it is
An issue was discovered in CentralAuth in MediaWiki through 1.36.2. The rightsnone MediaWiki message was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the setchange log.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00984 · 62.0th percentile
Published
2021-10-06T20:28Z
EPSS history
Timeline
06 OCT 20:28Z
An issue was discovered in CentralAuth in MediaWiki through 1.36.2