Lucene search
GoogleOSV:CVE-2021-45472HistoryDec 24, 2021 - 2:15 a.m.
CVE-2021-45472
2021-12-2402:15:07
Google
osv.dev
7
mediawiki
xss
wikibase
external identifier
url
javascript url
In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution marker, and the javascript: URL scheme (among others) can be used.
Related
prion
prion
Design/Logic Flaw
2021-12-24 02:15:00
redhatcve
redhatcve
CVE-2021-45472
2021-12-29 17:20:35
cve
cve
CVE-2021-45472
2021-12-24 02:15:07
ubuntucve
ubuntucve
CVE-2021-45472
2021-12-24 00:00:00
osv
osv
BIT-mediawiki-2021-45472
2024-03-06 11:08:51
cvelist
cvelist
CVE-2021-45472
2021-12-24 01:04:04
nvd
nvd
CVE-2021-45472
2021-12-24 02:15:07
fedora
fedora
[SECURITY] Fedora 35 Update: mediawiki-1.36.3-1.fc35
2022-01-08 01:19:42
openvas
openvas
MediaWiki <= 1.37 Multiple Vulnerabilities - Windows
2022-06-17 00:00:00
Fedora: Security Advisory for mediawiki (FEDORA-2021-bef1126908)
2022-01-08 00:00:00
MediaWiki <= 1.37 Multiple Vulnerabilities - Linux
2022-06-17 00:00:00