Back to bug 1826079

Who When What Removed Added
Guilherme de Almeida Suckevicz 2020-04-20 20:04:02 UTC Depends On 1826080
Guilherme de Almeida Suckevicz 2020-04-20 20:04:54 UTC Blocks 1826082
Jason Shepherd 2020-04-21 05:57:25 UTC Fixed In Version mediawiki-1.34.0
Jason Shepherd 2020-04-24 00:14:12 UTC Doc Text The MediaWiki logout redirect url can be controlled by an attacker. An attacker able to create wiki pages could change the logout URL which a user is redirected to when logging out.
Jason Shepherd 2020-04-24 00:17:03 UTC Depends On 1827452, 1827453
RaTasha Tillery-Smith 2020-04-27 16:09:47 UTC Doc Text The MediaWiki logout redirect url can be controlled by an attacker. An attacker able to create wiki pages could change the logout URL which a user is redirected to when logging out. A flaw was found in MediaWiki, where an attacker can control the MediaWiki logout redirect URL. This flaw allows an attacker with the ability to create wiki pages, to change the logout URL that a user is redirected to when logging out.
Red Hat Bugzilla 2022-01-08 05:28:55 UTC CC jokerman
Red Hat Bugzilla 2022-05-09 08:30:38 UTC CC aos-bugs
Red Hat Bugzilla 2022-08-01 08:29:28 UTC CC puiterwijk
Red Hat Bugzilla 2023-07-07 08:29:49 UTC Assignee security-response-team nobody

Back to bug 1826079