In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with mw.message().parse(). The expected result is that the jQuery object does not contain an <a> tag (or it does not have a href attribute, or it's empty, etc.). The actual result is that the object contains an <a href ="javascript... that executes when clicked.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The
    attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with
    mw.message().parse(). The expected result is that the jQuery object does not contain an <a> tag (or it
    does not have a href attribute, or it's empty, etc.). The actual result is that the object contains an <a
    href ="javascript... that executes when clicked. (CVE-2020-25814)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The     attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with     mw.message().parse(). The expected result is that the jQuery object does not contain an <a> tag (or it     does not have a href attribute, or it's empty, etc.). The actual result is that the object contains an <a     href =javascript... that executes when clicked. (CVE-2020-25814)

Note that Nessus relies on the presence of the package as reported by the vendor.

https://lists.wikimedia.org/pipermail/mediawiki-announce/2020-Septembe r/000263.html

The 1.34.x series is now end-of-life and the 1.35.x series is a LTS release.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues were discovered in MediaWiki, a website engine for collaborative work: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate limiting against brute force attempts.

ID	Name	Product	Family	Severity
434287	SCA: security update for mediawiki/core (GHSA-4vr7-m8p8-434h)	Tenable Cloud Security	SCA Checks	medium
434287	SCA: security update for mediawiki/core (GHSA-4vr7-m8p8-434h)	Tenable Self-Hosted Container Security	SCA Checks	medium
244434	Linux Distros Unpatched Vulnerability : CVE-2020-25814	Nessus	Misc.	medium
144140	Fedora 33 : mediawiki / php-oojs-oojs-ui / php-wikimedia-assert / etc (2020-a4802c53d9)	Nessus	Fedora Local Security Checks	high
140811	Debian DSA-4767-1 : mediawiki - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-25814

medium

Tenable Plugins

medium

medium

medium

high

high