CNNVD-202601-1581 Information

CNNVD ID

CNNVD-202601-1581

CVE-2026-22710

  • CNNVD Published: 2026-01-09

Description (Chinese)

Mediawiki - Wikibase Extension是Mediawiki开源的一个数据库扩展。 Mediawiki - Wikibase Extension 1.45版本、1.44版本、1.43版本和1.39版本存在安全漏洞,该漏洞源于输入中和不当,可能导致跨站脚本攻击。

Description (English)

Mediawiki - Wikibase Extension is an extension of the Mediawiki open source. There is a security loophole in Mediawiki - Wikibase Extension 1.45, 1.44, 1.43 and 1.39, which stems from inappropriate input and may result in a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2026-01-09

Last Modified

2026-02-24

References

https://gerrit.wikimedia.org/r/q/I39d0074b2ad022b6efe6ab3dd8c8ec0f86c6c466 https://phabricator.wikimedia.org/T409737 https://access.redhat.com/security/cve/cve-2026-22710

Patch

https://www.mediawiki.org/wiki/Special:ExtensionDistributor/Wikibase

Share on: