THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-hw3m-8j5x-94ff (medium) — Semantic MediaWiki has an open redirect in Special:URIResolver

[GHSA] GHSA-hw3m-8j5x-94ff (medium) — Semantic MediaWiki has an open redirect in Special:URIResolver

highgithub_advisoriesPublished 2026-09-18

GHSA-hw3m-8j5x-94ff Severity: medium CVE: CVE-2026-77609

Semantic MediaWiki has an open redirect in Special:URIResolver

#### Failure mode

`Special:URIResolver` resolves its user-controlled subpage to a MediaWiki title and issues an HTTP 303 redirect to `$title->getFullURL()` without validating the resolved target. A crafted subpage can make that target point off-host: an interwiki prefix redire

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-77609cve
https://www.mediawiki.org/wiki/Foo`url

Original source: https://github.com/advisories/GHSA-hw3m-8j5x-94ff