CVE-2024-23173
1 advisory.
Packagist/mediawiki/cargo CVE-2024-23173: medium 6.1
MediaWiki Cargo Extension Cross-site Scripting vulnerability
Action: Upgrade mediawiki/cargo to 1.35.14 or later.
composer require mediawiki/cargo:1.35.14composer require mediawiki/cargo:1.39.6composer require mediawiki/cargo:1.40.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.35.14 | - |
| 1.36.0 | 1.39.6 | - |
| 1.40.0 | 1.40.2 | - |
Fixed versions
| 1.35.14 | 1.39.6 | 1.40.2 |
Sources
- osv: GHSA-rhpm-63w5-79rg
- https://nvd.nist.gov/vuln/detail/CVE-2024-23173
- https://github.com/wikimedia/mediawiki-extensions-Cargo/commit/e4f0b7fb11da0e4b18f2c416101965e417ba3bd2
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/965214
- https://github.com/wikimedia/mediawiki-extensions-Cargo
- https://phabricator.wikimedia.org/T348687
CVE-2024-23173 · published · modified · JSON