All vulnerabilities

Servers and applications

CVE-2020-35477

MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggles the "Change visibility of selected log entries" checkbox (or a tags checkbox) next to it, there is a redirection to the main page's action=historysubmit (instead of the desired behavior in which a…

Severity
Medium 5.3
Published
18 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.35.1
Sources
NVD

Affected software

SoftwareAffected versions
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki
  • Every version before 1.35.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-35477
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-35477