CVE-2023-45360
Fixed in a distro release EPSS <1%CVSS 5.4
An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers.
Products: mediawiki
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | mediawiki | 1:1.35.13-1~deb11u1 |
| Debian 12 | mediawiki | 1:1.39.5-1~deb12u1 |
| Debian 13 | mediawiki | 1:1.39.5-1 |
| Debian 14 | mediawiki | 1:1.39.5-1 |
| Ubuntu 18.04 LTS | mediawiki | no fix |
| Ubuntu 25.10 | mediawiki | no fix |
| Ubuntu 26.04 LTS | mediawiki | no fix |
| Ubuntu 26.10 | mediawiki | no fix |
| Ubuntu Pro 20.04 LTS | mediawiki | no fix |
| Ubuntu Pro 22.04 LTS | mediawiki | no fix |
| Ubuntu Pro 24.04 LTS | mediawiki | no fix |