CVE-2023-51704
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2023-51704 is a vulnerability discovered in MediaWiki before versions 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. This vulnerability affects various products, including Xz2hff, Xz2hfe, Xz2hf_, and many others listed in the affected_products field. The vulnerability allows for cross-site scripting (XSS) attacks on the Special:log/rights page when certain group-*-member messages are processed in includes/logging/RightsLogFormatter.php file. The risk score for this vulnerability is 26, indicating a medium severity level. To remediate the vulnerability, it is recommended to update MediaWiki to version 1.35.14, 1.39.6, or 1.40.2 or later versions that have addressed this issue to prevent potential exploitation by attackers seeking unauthorized access or data manipulation within an organization's MediaWiki instance.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions