CVE-2024-23179

Summary

CVE-2024-23179 is a vulnerability affecting MediaWiki versions prior to 1.40.2. The GlobalBlocking extension contains a flaw that allows for i18n-based XSS attacks. Malicious users can exploit this issue by manipulating a Special:GlobalBlock URI through the use of parentheses messages. This vulnerability puts subtitle links at risk and could lead to unintended execution of malicious code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.