Home | Notifications | New Note | Local | Federated | Search | Logout

maxlath@maxlath@piaille.fr

#libre book sharing @inventaire — #Commons #Wikidata #Wikibase #JS/TS #HumanAdBlocker — irregular @kanthaus resident — born around 352ppm CO₂ 

Thoughts are partly mine, but mostly ours
#transindividuation #everythingisaremix

#inventaireio #programming #LinkedOpenData #frpol #eupol #climate #sufficiency #MixedEconomy #philosophy #electro #RaveFusion #kindness #fedi22 

CW: capitalocene, politics, code, bad jokes

Website: https://maxlath.eu/
Location: mostly Rhône Valley/Leipzig (Europe)
Posts languages: en,fr,de,js,sh,sparql
Joined: 2026-10-01 09:21:22
1 notes, 0 following, 0 followers

maxlath@maxlath@piaille.fr (2026-09-30 17:59:15)
[🚨 #MediaWiki vulnerable extension]

If you are running a MediaWiki instance with Extension:External_Data < v3.7, your instance is vulnerable to arbitrary file loading and #RemoteCodeExecution.

The vulnerability was apparently publicly known since August, but due to the lack of communication, instance admins learned about it due to that vulnerability being exploited en masse. 

If you know and like a MediaWiki instance, you can check their Special:Version page to see if they are using the External_Data extension to warn them.

More info:
- https://lists.wikimedia.org/hyperkitty/list/mediawiki-l@lists.wikimedia.org/thread/5N55R3XNFE7BXQLGWKZI7Q4ZXZSF4C5I/
- https://www.cve.org/CVERecord?id=CVE-2026-100382

#infosec #wikipedia #wikidata #adminsys #CVE #pwned cc @mediawiki