Mediawiki Templatesandbox Extension
Monthly
Missing authorization checks in the MediaWiki TemplateSandbox extension let unauthenticated remote users reach functionality that should be constrained by access-control lists, yielding a CVSS 3.1 base score of 9.1 with high confidentiality and integrity impact but no availability impact. Exposure is limited to wikis that have the optional TemplateSandbox extension installed and enabled; a default MediaWiki core installation is not affected, and the fixed releases are 1.46.1, 1.45.5, and 1.43.10 for their respective branches. No public exploit code has been identified at time of analysis (EPSS 0.15%, 3rd percentile) and CISA SSVC records exploitation as none, although the issue is rated automatable with total technical impact, so the risk is serious but not yet observed as active.
Stored cross-site scripting in the MediaWiki TemplateSandbox extension allows low-privileged authenticated editors to inject arbitrary JavaScript into template sandbox previews, which then executes in the browser of any user induced to view the crafted content. Exploitation requires the extension to be installed, a valid low-privileged account to submit the malicious wikitext, and victim interaction with the preview. No public exploit code or active exploitation has been identified, and the impact is limited to browser-side script execution in the wiki origin rather than server compromise.
Missing authorization checks in the MediaWiki TemplateSandbox extension let unauthenticated remote users reach functionality that should be constrained by access-control lists, yielding a CVSS 3.1 base score of 9.1 with high confidentiality and integrity impact but no availability impact. Exposure is limited to wikis that have the optional TemplateSandbox extension installed and enabled; a default MediaWiki core installation is not affected, and the fixed releases are 1.46.1, 1.45.5, and 1.43.10 for their respective branches. No public exploit code has been identified at time of analysis (EPSS 0.15%, 3rd percentile) and CISA SSVC records exploitation as none, although the issue is rated automatable with total technical impact, so the risk is serious but not yet observed as active.
Stored cross-site scripting in the MediaWiki TemplateSandbox extension allows low-privileged authenticated editors to inject arbitrary JavaScript into template sandbox previews, which then executes in the browser of any user induced to view the crafted content. Exploitation requires the extension to be installed, a valid low-privileged account to submit the malicious wikitext, and victim interaction with the preview. No public exploit code or active exploitation has been identified, and the impact is limited to browser-side script execution in the wiki origin rather than server compromise.