Описание
Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 1.22.6 |
| cosmic | not-affected | 1.22.6 |
| devel | not-affected | 1.22.6 |
| esm-apps/bionic | not-affected | 1.22.6 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected] |
| lucid | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | ignored | end of life |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 63%
0.00454
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
nvd
почти 12 лет назад
Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.
debian
почти 12 лет назад
Cross-site scripting (XSS) vulnerability in includes/actions/InfoActio ...
github
больше 3 лет назад
Cross-site scripting vulnerability in includes/actions/InfoAction.php
EPSS
Процентиль: 63%
0.00454
Низкий
4.3 Medium
CVSS2