CVE-2024-47847
1 advisory.
Packagist/mediawiki/cargo CVE-2024-47847: medium 6.1, EPSS 0.41%
Mediawiki Cargo extension vulnerable to Cross-site Scripting
Action: Upgrade mediawiki/cargo to 3.6.1 or later.
composer require mediawiki/cargo:3.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.1 | - |
Fixed versions
| 3.6.1 |
Sources
- osv: GHSA-jqvm-9xm2-gc38
- https://nvd.nist.gov/vuln/detail/CVE-2024-47847
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063804
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063806
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063827
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1063831
- https://github.com/wikimedia/mediawiki-extensions-Cargo
- https://phabricator.wikimedia.org/T368628
- https://phabricator.wikimedia.org/T372211
CVE-2024-47847 · published · modified · JSON