Описание
Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 1.22.6 |
| cosmic | not-affected | 1.22.6 |
| devel | not-affected | 1.22.6 |
| esm-apps/bionic | not-affected | 1.22.6 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected] |
| lucid | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | ignored | end of life |
Показывать по
10
Ссылки на источники
4.3 Medium
CVSS2
Связанные уязвимости
nvd
больше 12 лет назад
Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.
debian
больше 12 лет назад
Cross-site scripting (XSS) vulnerability in includes/actions/InfoActio ...
github
больше 4 лет назад
Cross-site scripting vulnerability in includes/actions/InfoAction.php
4.3 Medium
CVSS2