PT-2024-32845
CVE-2024-47840
·
تاريخ النشر
2024-10-04
·
تاريخ التحديث
2024-10-16
الوصف من
CVSS 4.0
6.9
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Mediawiki - Apex skin versions 1.39.X through 1.39.8
Mediawiki - Apex skin versions 1.41.X through 1.41.2
Mediawiki - Apex skin versions 1.42.X through 1.42.1
Description
The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS, where an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.
Recommendations
For Mediawiki - Apex skin versions 1.39.X through 1.39.8, update to version 1.39.9 or later.
For Mediawiki - Apex skin versions 1.41.X through 1.41.2, update to version 1.41.3 or later.
For Mediawiki - Apex skin versions 1.42.X through 1.42.1, update to version 1.42.2 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾