CVE-2024-47845

MEDIUM Year: 2024
CVSS v3 Score
8.2
High
Weakness Type
CWE-116
View all →

Vulnerability Description

Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.

Related Vulnerabilities

CVE-2023-45539

HIGH
CVSS:8.2(High)

HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end ru...

CWE-1162023

CVE-2020-26226

HIGH
CVSS:8.1(High)

In the npm package semantic-release before version 17.2.3, secrets that would normally be masked by `semantic-release` can be accidentally disclosed if they contain characters that become encoded when...

CWE-1162020

CVE-2021-23205

HIGH
CVSS:8.1(High)

Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue ...

CWE-1162021

CVE-2022-40870

HIGH
CVSS:8.1(High)

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload inje...

CWE-1162022

CVE-2024-38473

HIGH
CVSS:8.1(High)

Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requ...

CWE-1162024

CVE-2024-38474

HIGH
CVSS:8.1(High)

Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any U...

CWE-1162024