exploitDog

GHSA-q2x4-v7h3-phvm

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2013-6452
http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html

EPSS

Процентиль: 60%

0.01007

Низкий

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2013-6452

ubuntu

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

CVE-2013-6452

nvd

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via crafted XSL in an SVG file.

CVE-2013-6452

debian

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, ...

EPSS

Процентиль: 60%

0.01007

Низкий

CVE ID

Дефекты

CWE-79