MalformedTitleException can lead to incorrect web pages
CVE-2023-45361

6.1MEDIUM

Key Information:

Vendor

MediaWiki
Vendor
CVE Published:
9 October 2024

What is CVE-2023-45361?

A flaw has been identified in the Vector Skin component of MediaWiki, specifically within the VectorComponentUserLinks.php file. Users of MediaWiki versions prior to 1.39.5 and 1.40.x before 1.40.1 experience issues when malformed titles are encountered. The MalformedTitleException is not adequately handled, potentially resulting in the display of incorrect web pages. This issue might lead to confusion for users and affect the integrity of content presentation on websites utilizing this software.

References

https://phabricator.wikimedia.org/T340220
https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.