CVE-2022-48614: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

December 10, 2023 (updated December 11, 2023)

Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.

References

github.com/SemanticMediaWiki/SemanticMediaWiki/commit/604968d44fcdfcbb7f1e00c5d662ca5d5a3a5613
github.com/SemanticMediaWiki/SemanticMediaWiki/issues/5262
github.com/advisories/GHSA-hj4c-vfc4-5f9c
nvd.nist.gov/vuln/detail/CVE-2022-48614
www.semantic-mediawiki.org/wiki/Semantic_MediaWiki_4.0.2

Code Behaviors & Features

Detect and mitigate CVE-2022-48614 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →