CVE-2024-47847: Various XSSes found in Cargo
Published Oct 5, 2024
·Updated
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.
Affected Software
2 affected componentsFixes available
composer/mediawiki/cargo<3.6.1
3.6.1
MediaWiki Cargo=3.6.0
Remediation
Event History
Oct 5, 2024
CVE Published
via MITRE·12:47 AM
Data Sourced
via MITRE·12:47 AM
DescriptionWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·03:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-47847?
CVE-2024-47847 is categorized as a cross-site scripting (XSS) vulnerability with significant security implications.
2
How do I fix CVE-2024-47847?
To mitigate CVE-2024-47847, upgrade Mediawiki - Cargo to version 3.6.1 or later.
3
What versions are affected by CVE-2024-47847?
CVE-2024-47847 affects Mediawiki - Cargo versions prior to 3.6.1.
4
What does CVE-2024-47847 affect specifically?
CVE-2024-47847 affects the Mediawiki - Cargo extension, enabling potential cross-site scripting attacks.
5
Who is impacted by CVE-2024-47847?
Users of Mediawiki - Cargo versions up to and including 3.6.0 are impacted by CVE-2024-47847.