ALT-PU-2014-2350

Низкий

ALT-PU-2014-2350: package mediawiki update to version 1.23.6-alt1

Источник

errata.altlinux.org

Дата публикации

13.11.2014

Дата обновления

13.11.2014

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades mediawiki to version 1.23.6-alt1.

Устраненные уязвимости2

CVE-2014-7199

Средний 4.3

Дата публикации: 30.09.2014

CWE-79

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file.

CVSS 2.0

Средний 4.3

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Ссылки

CVE-2014-7199 https://nvd.nist.gov/vuln/detail/CVE-2014-7199

Ссылки1

ALT-PU-2014-2350 https://errata.altlinux.org/ALT-PU-2014-2350

Связанные уязвимости

CVE-2014-7295

ubuntu

около 12 лет назад

The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via crafted CSS, as demonstrated by modifying MediaWiki:Common.css.

CVE-2014-7295

nvd

около 12 лет назад

CVE-2014-7295

debian

около 12 лет назад

The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWi ...

CVE-2014-7199

ubuntu

около 12 лет назад

CVE-2014-7199

nvd

около 12 лет назад