Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account
    allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2,
    1.31.2, 1.30.2 and 1.27.6. (CVE-2019-12471)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account     allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2,     1.31.2, 1.30.2 and 1.27.6. (CVE-2019-12471)

Note that Nessus relies on the presence of the package as reported by the vendor.

MediaWiki reports :

Security fixes : T197279, CVE-2019-12468: Directly POSTing to Special:ChangeEmail would allow for bypassing reauthentication, allowing for potential account takeover. T204729, CVE-2019-12473:
Passing invalid titles to the API could cause a DoS by querying the entire `watchlist` table. T207603, CVE-2019-12471: Loading user JavaScript from a non-existent account allows anyone to create the account, and XSS the users' loading that script. T208881: blacklist CSS var(). T199540, CVE-2019-12472: It is possible to bypass the limits on IP range blocks (`$wgBlockCIDRLimit`) by using the API.
T212118, CVE-2019-12474: Privileged API responses that include whether a recent change has been patrolled may be cached publicly. T209794, CVE-2019-12467: A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. T25227, CVE-2019-12466: An account can be logged out without using a token(CRRF) T222036, CVE-2019-12469: Exposed suppressed username or log in Special:EditTags. T222038, CVE-2019-12470: Exposed suppressed log in RevisionDelete page. T221739, CVE-2019-11358: Fix potential XSS in jQuery.

Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which may result in authentication bypass, denial of service, cross-site scripting, information disclosure and bypass of anti-spam measures.

ID	Name	Product	Family	Severity
433119	SCA: security update for mediawiki/core (GHSA-2rm7-xxx8-35jh)	Tenable Cloud Security	SCA Checks	medium
433119	SCA: security update for mediawiki/core (GHSA-2rm7-xxx8-35jh)	Tenable Self-Hosted Container Security	SCA Checks	medium
245749	Linux Distros Unpatched Vulnerability : CVE-2019-12471	Nessus	Misc.	medium
126485	FreeBSD : mediawiki -- multiple vulnerabilities (3c5a4fe0-9ebb-11e9-9169-fcaa147e860e)	Nessus	FreeBSD Local Security Checks	critical
125858	Debian DSA-4460-1 : mediawiki - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2019-12471

medium

Tenable Plugins

medium

medium

medium

critical

critical