CoreCVE
Back

MEDIUM

In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS

Published Nov 27, 2019

Description

In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arbitrary JavaScript execution can occur, aka XSS. This was addressed by introducing MathJax as a new mathematics rendering engine. NOTE: this GUI code is no longer bundled with the Wikibase Wikidata Query Service snapshots, such as 0.3.6-SNAPSHOT.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 27, 2019
Updated Aug 5, 2024
Reserved Nov 27, 2019
Link CVE-2019-19329
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-19329
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-19329
ENISA EUVD
Assigner mitre
Published Nov 27, 2019
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2019-8950
EUVD-2019-8950