CVE-2026-39840

概要

参考情報

• gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1237966 · Patch
• phabricator.wikimedia.org/T416368 · Exploit

cargo のその他の脆弱性

• CVE-2026-14363緊急 9.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - C…
• CVE-2026-58521緊急 9.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - C…
• CVE-2026-58519中 5.4Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - C…
• CVE-2026-39841中 6.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extens…
• CVE-2026-39839中 6.1Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extens…