Re: MediaWiki Extensions and Skins Security Release Supplement (1.35.11/1.38.7/1.39.4/1.40.0)
bawolff <[email protected]> Sun, 2 Jul 2023 21:54:45 -1200
| Newsgroups | gmane.science.linguistics.wikipedia.technical,gmane.org.wikimedia.mediawiki |
|---|---|
| Message-ID | <CA+oo+DUPtBrF1by5qmb6xDZbbzxJewaitQ37mWJyxeRmV8DpRQ@mail.gmail.com> |
> Wikibase >+ (T339111, CVE-2023-37302) - Style injection into badges on Wikidata due to unescaped quotes. > https://gerrit.wikimedia.org/r/c/933649 <https://gerrit.wikimedia.org/r/c/933649> > https://gerrit.wikimedia.org/r/c/933650 It should be noted that the description of this issue is incorrect. It is an XSS not just a style injection. -- bawolff _______________________________________________ Wikitech-l mailing list -- [email protected] To unsubscribe send an email to [email protected] https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/