CVE-2024-47845

Summary

CVE-2024-47845 is a newly disclosed vulnerability affecting the Mediawiki - CSS Extension. This issue is classified as an Improper Encoding or Escaping of Output vulnerability, which permits code injection. The vulnerability can be exploited in Mediawiki - CSS Extension versions 1.39.X before 1.39.9, 1.41.X before 1.41.3, and 1.42.X before 1.42.2. Successful exploitation could lead to arbitrary code execution, potentially compromising the affected Mediawiki instances. Users are advised to update their Mediawiki installations to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.