[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-9382":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":30,"references":32,"score":35,"epss_score":36,"epss_percentile":37,"is_kev":38,"cisa_kev_date_added":39,"cisa_kev_due_date":39,"cisa_ssvc":40,"attack_mappings":46,"exploits":83},262768,"CVE-2020-9382","EUVD-2020-30203","An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function.","2020-02-24T23:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":16},"2.0",5.5,"NETWORK","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL","LOW","NONE",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":23,"vectorString":24,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":18,"privilegesRequired":17,"confidentialityImpact":17},"UNCHANGED","3.1",5.4,"MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",true,[27],"CWE-74",[29],"cpe:2.3:a:widgets_project:widgets:*:*:*:*:*:mediawiki:*:*",[31],"Widgets_Project Widgets",[33,34],"https:\u002F\u002Fgerrit.wikimedia.org\u002Fr\u002Fq\u002FI953e060bc6994ffdba9f380c98173f53f8ca1ea8","https:\u002F\u002Fphabricator.wikimedia.org\u002FT245850",0.62,0.00971,0.61613,false,null,{"timestamp":39,"automatable":41,"tech_impact":42,"exploitation":43,"cisa_decision":44,"cisa_remediation_timeline":45},"no","partial","none",{},"FSU",[47,53,62,70,76],{"name":48,"source":49,"tactics":50,"technique_id":52},"Exploit Public-Facing Application","attack_vector",[51],"initial-access","T1190",{"name":54,"source":55,"cwe_ids":56,"tactics":57,"capec_ids":59,"technique_id":61},"Obfuscated Files or Information","capec",[27],[58],"stealth",[60],"CAPEC-267","T1027",{"name":63,"source":55,"cwe_ids":64,"tactics":65,"capec_ids":67,"technique_id":69},"Dynamic Linker Hijacking",[27],[66,58],"execution",[68],"CAPEC-13","T1574.006",{"name":71,"source":55,"cwe_ids":72,"tactics":73,"capec_ids":74,"technique_id":75},"Path Interception by PATH Environment Variable",[27],[66,58],[68],"T1574.007",{"name":77,"source":55,"cwe_ids":78,"tactics":79,"capec_ids":81,"technique_id":82},"Prevent Command History Logging",[27],[80],"defense-impairment",[68],"T1690",[84],{"link":34}]