exploitDog

GHSA-g3qp-m89q-7v8m

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2013-6453
http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html

EPSS

Процентиль: 71%

0.01414

Низкий

CVE ID

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-6453

ubuntu

больше 12 лет назад

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.

CVE-2013-6453

nvd

больше 12 лет назад

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.

CVE-2013-6453

debian

больше 12 лет назад

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 ...

EPSS

Процентиль: 71%

0.01414

Низкий

CVE ID

Дефекты

CWE-20