Beveiligingsadvies

CVE-2025-49579

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-12 18:50:44

Laatst bijgewerkt 2025-06-12 19:16:43

Toegewezen door GitHub_M

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. All system messages in menu headings using the Menu.mustache template are inserted as raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the `editinterface` but not the `editsitejs` user right. This vulnerability is fixed in 3.3.1.

← Alle CVE's bekijken Bekijk op cve.org ↗