What’s Vulnerable › Vulnerabilities

CVE-2023-29134

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-27 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit.

Affected products

• Wikimedia Foundation MediaWiki: through 1.39.3

References

• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/895774
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/898722
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/900133
• https://phabricator.wikimedia.org/T331362
• https://phabricator.wikimedia.org/rECRG920f3c19a84175bcfe93f41ecf9f8cef32730f8e
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/895774
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/898722
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Cargo/+/900133
• https://phabricator.wikimedia.org/T331362
• https://phabricator.wikimedia.org/rECRG920f3c19a84175bcfe93f41ecf9f8cef32730f8e

Get alerted when CVE-2023-29134 or the next vulnerability affects your stack