ALT-PU-2014-1172

Высокий

ALT-PU-2014-1172: package mediawiki update to version 1.22.2-alt1

Источник

errata.altlinux.org

Дата публикации

07.02.2014

Дата обновления

07.02.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades mediawiki to version 1.22.2-alt1.

Устраненные уязвимости19

CVE-2012-5394

Средний 6.8

Дата публикации: 13.12.2013

CWE-352

Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading.

CVSS 2.0

Средний 6.8

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2012-5394 https://nvd.nist.gov/vuln/detail/CVE-2012-5394

Ссылки1

ALT-PU-2014-1172 https://errata.altlinux.org/ALT-PU-2014-1172

Связанные уязвимости

CVE-2012-5394

nvd

почти 13 лет назад

GHSA-8c25-pfvp-7j3w

github

больше 4 лет назад

CVE-2013-4567

ubuntu

почти 13 лет назад

Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via a \b (backspace) character in CSS.

CVE-2013-4567

nvd

почти 13 лет назад

CVE-2013-4567

debian

почти 13 лет назад

Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki ...