Mediawiki Collection Extension
Monthly
Open redirect in the MediaWiki Collection extension (versions before 1.46.1, 1.45.5, and 1.43.10) allows an unauthenticated attacker to craft a URL that sends a victim to an arbitrary external site after the victim clicks it, which can be used to fake the source of data and to lend the wiki's domain to phishing or credential-harvesting pages. Exploitation requires victim interaction (UI:R) - the target must follow the crafted link - so delivery is social-engineering based rather than autonomous, and the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N yields a moderate score of 6.1 with limited confidentiality and integrity impact and a scope change because the redirect leaves the trusted origin. Only wikis with the Collection extension installed and enabled are exposed; no public exploit code has been identified at time of analysis, and EPSS is very low at 0.14% (3rd percentile), indicating little observed exploitation activity.
Open redirect in the MediaWiki Collection extension (versions before 1.46.1, 1.45.5, and 1.43.10) allows an unauthenticated attacker to craft a URL that sends a victim to an arbitrary external site after the victim clicks it, which can be used to fake the source of data and to lend the wiki's domain to phishing or credential-harvesting pages. Exploitation requires victim interaction (UI:R) - the target must follow the crafted link - so delivery is social-engineering based rather than autonomous, and the CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N yields a moderate score of 6.1 with limited confidentiality and integrity impact and a scope change because the redirect leaves the trusted origin. Only wikis with the Collection extension installed and enabled are exposed; no public exploit code has been identified at time of analysis, and EPSS is very low at 0.14% (3rd percentile), indicating little observed exploitation activity.