CVE-2020-29007

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-29007
The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. This allows any user with an ability to edit articles (potentially including unauthenticated anonymous users) to execute arbitrary Scheme or shell code by using crafted {{Image data to generate musical scores containing malicious code.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/seqred-s-a/cve-2020-29007 Exploit Mitigation Third Party Advisory
https://phabricator.wikimedia.org/T257062 Exploit Third Party Advisory
https://seqred.pl/en/cve-2020-29007-remote-code-execution-in-mediawiki-score/ Exploit Third Party Advisory
https://www.mediawiki.org/wiki/Extension:Score Vendor Advisory
https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:mediawiki:score:*:*:*:*:*:mediawiki:*:*
History

26 Apr 2023, 16:13

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-94
References (MISC) https://www.mediawiki.org/wiki/Extension:Score - (MISC) https://www.mediawiki.org/wiki/Extension:Score - Vendor Advisory
References (MISC) https://github.com/seqred-s-a/cve-2020-29007 - (MISC) https://github.com/seqred-s-a/cve-2020-29007 - Exploit, Mitigation, Third Party Advisory
References (MISC) https://seqred.pl/en/cve-2020-29007-remote-code-execution-in-mediawiki-score/ - (MISC) https://seqred.pl/en/cve-2020-29007-remote-code-execution-in-mediawiki-score/ - Exploit, Third Party Advisory
References (MISC) https://phabricator.wikimedia.org/T257062 - (MISC) https://phabricator.wikimedia.org/T257062 - Exploit, Third Party Advisory
References (MISC) https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory - (MISC) https://www.mediawiki.org/wiki/Extension:Score/2021_security_advisory - Vendor Advisory
First Time Mediawiki
Mediawiki score
CPE cpe:2.3:a:mediawiki:score:*:*:*:*:*:mediawiki:*:*

15 Apr 2023, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-04-15 22:15

Updated : 2023-12-10 15:01

NVD link : CVE-2020-29007

Mitre link : CVE-2020-29007

CVE.ORG link : CVE-2020-29007

JSON object : View

Products Affected

mediawiki

  • score
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')