Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Improper Input Validation Vulnerability - CVE-2020-35477 - Vulnerability Database
MediaWiki

MediaWiki Improper Input Validation Vulnerability - CVE-2020-35477

Medium
Reference: CVE-2020-35477
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-35477
Title: MediaWiki Improper Input Validation Vulnerability
Overview:

MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page visits a log entry on Special:Log and toggles the quotChange visibility of selected log entriesquot checkbox (or a tags checkbox) next to it there is a redirection to the main page39s actionhistorysubmit (instead of the desired behavior in which a revision-deletion form appears).