CVE-2022-42985 MEDIUM

CVE-2022-42985

Vendor N/A
Product n/a
Published November 17, 2022
Last update April 25, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:H/S:C/UI:R

What the vulnerability does

01Description

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting (XSS).

Key dates

02Disclosure timeline

November 17, 2022 CVE published
April 25, 2025 Record updated