PT-2023-10829 · Mediawiki · Glb Meetup Tag Extension
CVE-2018-25089
·
Publicado
2023-08-28
·
Atualizado
2024-05-17
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
glb Meetup Tag Extension version 0.1
Description
A vulnerability was found in the glb Meetup Tag Extension on MediaWiki, affecting the Link Attribute Handler component. The issue leads to the use of a web link to an untrusted target with window.opener access.
Recommendations
For glb Meetup Tag Extension version 0.1, upgrade to version 0.2 to address this issue.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Glb Meetup Tag Extension