CVE-2023-3550

published 2023-09-25

CVE-2023-3550: Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a…

Priority P3 48 critical 9 CVSS 3.1

AV N AC L PR L UI R S C C H I H A H

Mediawiki v1.40.0 does not validate namespaces used in XML files.

Therefore, if the instance administrator allows XML file uploads,

a remote attacker with a low-privileged user account can use this

exploit to become an administrator by sending a malicious link to

the instance administrator.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	debian_linux	—	—
debian	mediawiki	< mediawiki 1:1.39.5-1~deb12u1 (bookworm)	mediawiki 1:1.39.5-1~deb12u1 (bookworm)
mediawiki	mediawiki	—	—
mediawiki	mediawiki	>= 0 < 1:1.35.13-1~deb11u1	1:1.35.13-1~deb11u1
mediawiki	mediawiki	>= 0 < 1:1.39.5-1~deb12u1	1:1.39.5-1~deb12u1
mediawiki	mediawiki	>= 0 < 1:1.39.5-1	1:1.39.5-1
mediawiki	mediawiki	>= 0 < 1:1.39.5-1	1:1.39.5-1

CVSS provenance

nvd v3.1 9.0 CRITICAL CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

osv 9.0 CRITICAL

vendor_debian 7.3 HIGH

vendor_redhat 7.3 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79