CVE-2022-34911

An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can occur in configurations that allow a JavaScript payload in a username. After account creation, when it sets the page title to "Welcome" followed by the username, the username is not escaped: SpecialCreateAccount::successfulAction() calls ::showSuccessPage() with a message as second parameter, and OutputPage::setPageTitle() uses text().

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34911.json",
    "unresolved_ranges": [
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "1.35.7"
                },
                {
                    "introduced": "1.37.x"
                },
                {
                    "fixed": "1.37.3"
                },
                {
                    "introduced": "1.38.x"
                },
                {
                    "fixed": "1.38.1"
                }
            ]
        }
    ],
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/wikimedia/mediawiki

Affected ranges

Type

GIT

Repo

https://github.com/wikimedia/mediawiki

Events

Introduced

Fixed

03021aff27a3047a2b5c6aec0d95966a07bd2583

Introduced

bc542ec6d8573dfb906b468901799e0017875f1e

Fixed

1d62ca6ec30099e7e9d6c554693a4b8e88e91139

Database specific

{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:mediawiki:mediawiki:1.38.0:-:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.35.7"
        },
        {
            "last_affected": "1.38.0-NA"
        },
        {
            "introduced": "1.36.0"
        },
        {
            "fixed": "1.37.3"
        }
    ]
}

Affected versions

1.*

1.1.0

1.3.0beta1

1.35.0

1.35.0-rc.0

1.35.0-rc.1

1.35.0-rc.2

1.35.0-rc.3

1.35.1

1.35.2

1.35.3

1.35.4

1.35.5

1.35.6

1.37.0

1.37.0-rc.0

1.37.0-rc.1

1.37.0-rc.2

1.37.1

1.37.2

1.5.0alpha1

1.5.0alpha2

1.5.0beta1

1.5.0beta2

1.5.0beta3

1.5.0beta4

1.6.0

Other

test-hashar-for-ci

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-34911.json"