MediaWiki URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2020-10959 - Vulnerability Database

MediaWiki URL Redirection to Untrusted Site (Open Redirect) Vulnerability - CVE-2020-10959

Medium

Reference: CVE-2020-10959

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-10959

Title: MediaWiki URL Redirection to Untrusted Site (Open Redirect) Vulnerability

Overview:

resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.