CVE-2023-29141 X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Attackers can bypass IP-based blocking mechanisms by spoofing the X-Forwarded-For header, allowing unauthorized access or actions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-29141?
CVE-2023-29141 is a critical vulnerability in Fedoraproject Fedora, published on 31 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.
Weakness: CWE-444
Which versions are affected by CVE-2023-29141?
7 open source packages ship an affected version, including mediawiki/core and mediawiki. It affects 2 products.
| Package | Affected | Fixed in |
|---|---|---|
mediawiki/core Packagist | All versions | 1.35.10 |
mediawiki/core Packagist | All versions | 1.35.10 |
mediawiki/core Packagist | From 1.38.0 | 1.38.6 |
mediawiki/core Packagist | From 1.38.0 | 1.38.6 |
mediawiki/core Packagist | From 1.39.0 | 1.39.3 |
mediawiki/core Packagist | From 1.39.0 | 1.39.3 |
1 more packages
mediawiki Bitnami | All versions | 1.35.10, 1.38.6, 1.39.3 |
Products include Fedoraproject Fedora, Mediawiki Mediawiki.
How do I fix CVE-2023-29141?
Upgrade mediawiki/core to a fixed version for your release line: 1.35.10, 1.38.6 or 1.39.3.
Is CVE-2023-29141 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-29141 exists.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as BIT-mediawiki-2023-29141, DEBIAN-CVE-2023-29141, DLA-3540-1, GHSA-5vj8-g3qg-4qh6, UBUNTU-CVE-2023-29141.