Medium severity6.1NVD Advisory· Published Oct 9, 2024· Updated Apr 15, 2026

CVE-2023-45361

Description

An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-intro-page MalformedTitleException is uncaught if it is not a valid title, leading to incorrect web pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wikimedia Foundation/Mediawiki Skins Vectorinferred
Range: <1.39.5 || >=1.40.0,<1.40.1
Wikimedia Foundation/Vectorllm-fuzzy
Range: <1.39.5 (1.39.x) or <1.40.1 (1.40.x)

Patches

Vulnerability mechanics

References

gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/skins/Vector/+/2a452b7e2562cba32b8a17bc91dc5abb531f0a1cnvd
phabricator.wikimedia.org/T340220nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000