Vulnerability CVE-2024-47849
Published: 2024-10-05

Description:
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Injection.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.

 References:
https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/1055963
https://phabricator.wikimedia.org/T370632
https://phabricator.wikimedia.org/T368628
Copyright 2024, cxsecurity.com

 

Back to Top