Unrated severityNVD Advisory· Published Dec 24, 2021· Updated Aug 4, 2024
CVE-2021-45472
CVE-2021-45472
Description
In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution marker, and the javascript: URL scheme (among others) can be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- MediaWiki/MediaWikidescription
Patches
Vulnerability mechanics
References
3- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7JNQA53K675TQBBJPZRAG5ZT6XES3IS/mitrevendor-advisoryx_refsource_FEDORA
- gerrit.wikimedia.org/r/q/I37ece1dfdc80d38055067c9c4fa73ba591acd8bdmitrex_refsource_MISC
- phabricator.wikimedia.org/T297570mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.