{"id":"CVE-2020-10959","aliases":["BIT-mediawiki-2020-10959","EUVD-2022-4609","GHSA-mqhw-wq8p-vf5r"],"status":"published","title":"MediaWiki Open Redirect vulnerability","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01429,"percentile":0.73195,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-601"],"published":"2020-06-02T13:52:22Z","modified":"2026-10-24T10:30:21Z","fixes":[{"ecosystem":"Packagist","package":"mediawiki/core","fixed_in":["1.34.0-rc.0"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"mediawiki","fixed_in":["1.35.0"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"mediawiki/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.0-rc.0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mediawiki","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.35.0"}]}]},{"source":"osv","ecosystem":"Packagist","package":"mediawiki/core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.0-rc.0"}]}],"versions":["1.20.3","1.20.4","1.20.5","1.20.6","1.20.7","1.20.8","1.21.0","1.21.1","1.21.10","1.21.11","1.21.2","1.21.3","1.21.4","1.21.5","1.21.6","1.21.7","1.21.8","1.21.9","1.22.0rc0","1.24.0","1.24.0-rc.0","1.24.0-rc.1","1.24.0-rc.2","1.24.0-rc.3","1.24.1","1.24.2","1.24.3","1.24.4","1.24.5","1.24.6","1.25.0","1.25.0-rc.0","1.25.1","1.25.2","1.25.3","1.25.4","1.25.5","1.25.6","1.26.0","1.26.1","1.26.2","1.26.3","1.26.4","1.27.0","1.27.0-rc.0","1.27.0-rc.1","1.27.1","1.27.2","1.27.3","1.27.4","1.27.5","1.27.6","1.27.7","1.28.0","1.28.0-rc.0","1.28.0-rc.1","1.28.1","1.28.2","1.28.3","1.29.0","1.29.0-rc.0","1.29.0-rc.1","1.29.1","1.29.2","1.29.3","1.30.0","1.30.0-rc.0","1.30.1","1.30.2","1.31.0","1.31.0-rc.0","1.31.0-rc.1","1.31.0-rc.2","1.31.1","1.31.10","1.31.11","1.31.12","1.31.13","1.31.14","1.31.15","1.31.16","1.31.2","1.31.3","1.31.4","1.31.5","1.31.6","1.31.7","1.31.8","1.31.9","1.32.0","1.32.0-rc.0","1.32.0-rc.1","1.32.0-rc.2","1.32.1","1.32.2","1.32.3","1.32.4","1.32.5","1.32.6","1.33.0","1.33.0-rc.0","1.33.1","1.33.2","1.33.3","1.33.4"]}],"products":[{"vendor":"mediawiki","product":"mediawiki"}],"references":[{"url":"https://phabricator.wikimedia.org/T232932","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","web","fix"]},{"url":"https://gerrit.wikimedia.org/r/c/mediawiki/core/+/536725","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web","fix"]},{"url":"https://phabricator.wikimedia.org/T240393","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","web","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10959","tags":["web","advisory"]},{"url":"https://github.com/wikimedia/mediawiki/commit/d4a552e65bdfd7309a9b8537e9dbe69c5e2991eb","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2020-10959.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mqhw-wq8p-vf5r"},{"url":"https://github.com/wikimedia/mediawiki","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2020-10959","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","status":"published","published":"2020-06-02T13:52:22Z","modified":"2024-08-04T11:21:14.656Z","updated_at":"2026-11-02T14:35:48.213211Z"}],"euvd":[{"id":"EUVD-2022-4609","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","status":"published","published":"2020-06-02T13:52:22Z","modified":"2024-08-04T11:21:14Z","updated_at":"2026-11-03T03:07:47.591202Z"}],"ghsa":[{"id":"GHSA-mqhw-wq8p-vf5r","title":"MediaWiki Open Redirect vulnerability","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.34.0-rc.0 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","status":"published","published":"2022-05-24T17:18:58Z","modified":"2024-05-15T22:52:27Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:37:49.987036Z"}],"nvd":[{"id":"CVE-2020-10959","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","status":"published","published":"2020-06-02T14:15:10.507Z","modified":"2026-06-17T02:48:45.16Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:06:04.922138Z"}],"osv":[{"id":"CVE-2020-10959","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","status":"published","published":"2020-06-02T14:15:10.507Z","modified":"2026-10-24T10:30:21.166289363Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"GHSA-mqhw-wq8p-vf5r","title":"MediaWiki Open Redirect vulnerability","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.34.0-rc.0 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","status":"published","published":"2022-05-24T17:18:58Z","modified":"2024-05-19T02:23:55.132212Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:46:52.170928Z"},{"id":"BIT-mediawiki-2020-10959","description":"resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.35 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.","status":"published","published":"2024-03-06T11:14:08.395Z","modified":"2025-04-03T14:40:37.652Z","updated_at":"2026-11-02T15:28:33.072289Z"}]}}