CVE-2018-25089

MEDIO 5.3CVE-2018-25089 · Published 28/08/2023 · updated 17/06/2026

In breve

CVE-2018-25089 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda meetup tag (glb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.61%, superiore al 49.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
meetup tag glb	`= 0.1`	No fix yet

Description

A vulnerability was found in glb Meetup Tag Extension 0.1 on MediaWiki. It has been rated as problematic. This issue affects some unknown processing of the component Link Attribute Handler. The manipulation leads to use of web link to untrusted target with window.opener access. Upgrading to version 0.2 is able to address this issue. The identifier of the patch is 850c726d6bbfe0bf270801fbb92a30babea4155c. It is recommended to upgrade the affected component. The identifier VDB-238157 was assigned to this vulnerability.

References

glb/mediawiki-tag-extension-meetup commit 850c726 · Patch
glb/mediawiki-tag-extension-meetup release v0.2 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free