Wikimedia Foundation MediaWiki CSS Extension Path Traversal Vulnerability

A path traversal vulnerability has been identified in the Wikimedia Foundation MediaWiki CSS extension, affecting versions 1.39, 1.43, and 1.44. This vulnerability allows for improper limitation of a pathname to a restricted directory, potentially leading to unauthorized file access.

Impact

Exploitation of this vulnerability could allow an attacker to traverse the file system and access files outside of the intended directory, potentially leading to the disclosure of sensitive information.