CVE-2023-3550

Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting, denial of service or information disclosure For the oldstable distribution (bullseye), these problems have been fixed in version 1:13513-1~deb11u1 For the stable distribution (bookworm), these problems have ...

DescriptionThe MITRE CVE dictionary describes this issue as: Mediawiki v1400 does not validate namespaces used in XML files Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrato ...