Описание
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [1:1.19.11+dfsg-1]] |
| lucid | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | ignored | end of life |
| saucy | ignored | end of life |
| trusty | not-affected | 1:1.19.11+dfsg-1 |
| trusty/esm | DNE | trusty was not-affected [1:1.19.11+dfsg-1] |
| upstream | released | 1:1.19.10+dfsg-1 |
Показывать по
10
7.5 High
CVSS2
Связанные уязвимости
nvd
больше 11 лет назад
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.
debian
больше 11 лет назад
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 ...
github
больше 3 лет назад
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.
7.5 High
CVSS2