CVE-2023-3550 (mediawiki)

Mediawiki v1.40.0 does not validate namespaces used in XML files.

Therefore, if the instance administrator allows XML file uploads,

a remote attacker with a low-privileged user account can use this

exploit to become an administrator by sending a malicious link to

the instance administrator.

account attacker cve exploit file files instance link low malicious malicious link namespaces privileged privileged user xml