一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月30日

CVE-2026-103044 – XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediaw

未分类
📑 文章目录

XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki – EasyTimeline extension allows XML Injection.

This issue affects Mediawiki – EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10.