Description
An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or Special:RevisionDelete.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://phabricator.wikimedia.org/T297543 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PT4CHJKOQOVMI65TSNZRNV6FIWU7SGZD/ ↗
- https://lists.debian.org/debian-lts-announce/2022/09/msg00027.html ↗
- https://www.debian.org/security/2022/dsa-5246 ↗
- https://security.gentoo.org/glsa/202305-24 ↗