Page MenuHomePhabricator
Create Task
Maniphest T353826

Pentest FY2023/24 - Wikipedia Library
Closed, ResolvedPublic
Actions

Description

Description of service or project
The Wikipedia Library supports the Wikimedia community in doing research, adding verifiable information to Wikimedia projects, and citing that content to reliable sources. This is done by providing the Wikimedia community with free access to otherwise paywalled sources of information. This project is in production on WMF labs - the WMF cloud platform available to both public and WMF staff for projects

Testing Type
Greybox, including a code review and penetration test with some knowledge of the application

Owning Team
Core Experience

Scoping/Tracking document.

Start Date
January 18, 2024

See also team tracking task: T358257: Wikipedia Library January 2024 Pentest

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedMstylesT353826 Pentest FY2023/24 - Wikipedia Library
ResolvedSecurityjsn.shermanT355804 Cross-Site Scripting vulnerability in The Wikipedia Library
Restricted Task
Restricted Task
Restricted Task
Restricted Task
Restricted Task
Restricted Task
Restricted Task
Restricted Task

Event Timeline

Cleo_Lemoisson created this task.Dec 20 2023, 5:46 PM
Restricted Application added subscribers: Sadads, Aklapper. · View Herald TranscriptDec 20 2023, 5:46 PM
Cleo_Lemoisson renamed this task from Pentest FY2024 - Wikipedia Library to Pentest FY24 - Wikipedia Library .Dec 20 2023, 5:51 PM
Cleo_Lemoisson updated the task description. (Show Details)
Aklapper renamed this task from Pentest FY24 - Wikipedia Library to Pentest FY2023/24 - Wikipedia Library .Dec 20 2023, 6:32 PM
Mstyles updated the task description. (Show Details)Jan 11 2024, 8:19 PM
Mstyles updated the task description. (Show Details)
Mstyles moved this task from Vendor Confirmed to In Progress on the secscrum board.Jan 24 2024, 7:54 PM
Mstyles added a subtask: T355804: Cross-Site Scripting vulnerability in The Wikipedia Library.
• Samwalton9-WMF closed subtask T355804: Cross-Site Scripting vulnerability in The Wikipedia Library as Resolved.Jan 25 2024, 3:34 PM
sbassett subscribed.Feb 28 2024, 5:03 PM

See team's issue tracking task: T358257: Wikipedia Library January 2024 Pentest

sbassett updated the task description. (Show Details)Feb 28 2024, 5:03 PM
Mstyles reopened this task as In Progress.Feb 28 2024, 7:00 PM
Mstyles closed this task as a duplicate of T358257: Wikipedia Library January 2024 Pentest.
Mstyles merged a task: T358257: Wikipedia Library January 2024 Pentest.
Mstyles added subscribers: jsn.sherman, Mstyles, Pppery, Scardenasmolinar.
Mstyles added subtasks: Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task, Restricted Task.Feb 28 2024, 7:05 PM
Aklapper added a project: The-Wikipedia-Library.Mar 18 2024, 9:00 AM
Mstyles closed this task as Resolved.Mar 27 2024, 11:35 PM
Mstyles moved this task from In Progress to Our Part Is Done on the secscrum board.

Report has been released, gone over with the team and subtasks created so I'm resolving this ticket.

jsn.sherman closed subtask Restricted Task as Resolved.Mon, May 13, 2:18 PM
Pppery unsubscribed.Mon, May 13, 4:07 PM
• Samwalton9-WMF closed subtask Restricted Task as Resolved.Tue, May 21, 2:34 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL