关键信息 漏洞ID CVE-2025-53467 漏洞类型 Stored XSS through system messages in Extension/ApprovedRevs 描述 Native system messages are inserted into HTML without proper sanitization. ApprovedRevs extension inserts native system messages into the HTML without proper sanitization. 影响版本 MediaWiki 1.39.0 - 1.40.0 发现者 Semiautomatic Developer 报告时间 2022-08-15 修复时间 2022-08-22 相关链接 https://phabricator.wikimedia.org/T2547466 https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ApprovedRevs/+/665512 修复提交 Change #665512: [Security] Fixed stored XSS through system messages Change #665513: [Security] Fixed stored XSS through system messages 备注 The vulnerability was fixed by ensuring that native system messages are properly sanitized before being inserted into the HTML. ``` 从截图中可以获取到漏洞的ID、类型、描述、影响版本、发现者、报告和修复时间以及相关链接和修复提交等关键信息。