CVE-2021-45474

Опубликовано: 17 дек. 2021

Источник: redhat

CVSS3: 6.1

EPSS Низкий

Описание

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

A flaw was found in mediawiki through 1.37. The Special:ImportFile URI (aka FileImporter) allows XSS, shown by the clientUrl parameter.

Отчет

The mediawiki package was removed from OpenShift Container Platform (OCP) in version 4.3, therefore for OCP 4 has been marked as out of support scope.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat OpenShift Container Platform 4	mediawiki	Out of support scope

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=2036089mediawiki: XSS in Special:ImportFile URL

EPSS

Процентиль: 49%

0.00256

Низкий

6.1 Medium

CVSS3

Связанные уязвимости

CVE-2021-45474

CVSS3: 6.1

ubuntu

около 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

CVE-2021-45474

CVSS3: 6.1

nvd

около 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

GHSA-48pv-xvcw-jg8h

github

около 4 лет назад

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl parameter.

EPSS

Процентиль: 49%

0.00256

Низкий

6.1 Medium

CVSS3