high8.6
CVE-2023-29134
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3.
Impact
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit.
Affected products
| Product | Affected versions |
|---|---|
| Cargo Extension For MediaWiki | through 1.39.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/895774
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/898722
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/900133
- https://phabricator.wikimedia.org/T331362
- https://phabricator.wikimedia.org/rECRG920f3c19a84175bcfe93f41ecf9f8cef32730f8e
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/895774
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/898722
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/900133
- https://phabricator.wikimedia.org/T331362
- https://phabricator.wikimedia.org/rECRG920f3c19a84175bcfe93f41ecf9f8cef32730f8e