Cross-Site Scripting Vulnerabilities

CVE-2024-47841

Summary

A vulnerability has been identified in the Mediawiki CSS Extension developed by the Wikimedia Foundation, allowing for improper limitation of pathnames leading to potential path traversal attacks. This flaw can be exploited by attackers to gain unauthorized access to restricted directories, posing significant security risks. The affected versions include Mediawiki - CSS Extension prior to 1.42.2 for 1.42.X, before 1.41.3 for 1.41.X, and before 1.39.9 for 1.39.X.

References