User content can redirect the logout button to different URL

PKSA-49h8-xbh2-gnd6 CVE-2020-10959

Affected package: mediawiki/core

Affected version: >=1.34.0,<1.34.1

Reported by:
FriendsOfPHP/security-advisories