CVE-2023-51704

Summary

CVE-2023-51704 is a vulnerability affecting MediaWiki versions before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The issue lies in the includes/logging/RightsLogFormatter.php file, where group-*-member messages can trigger Cross-Site Scripting (XSS) attacks on Special:log/rights pages. This vulnerability could potentially allow attackers to inject malicious scripts into a user's browser, leading to unauthorized access, data theft, or other malicious activities. MediaWiki users are advised to update their software to the latest available version to address this issue and mitigate potential risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.