Поиск уязвимостей
Количество 5
Количество 5
CVE-2015-2931
Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI.
CVE-2015-2931
Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI.
CVE-2015-2931
Incomplete blacklist vulnerability in includes/upload/UploadBase.php i ...
GHSA-m3mr-7w8m-ffxc
Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI.
ALT-PU-2015-1935
ALT-PU-2015-1935: package `mediawiki` update to version 1.23.11-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-2931 Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI. | CVSS2: 4.3 | 2% Низкий | больше 11 лет назад |
 | CVE-2015-2931 Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI. | CVSS2: 4.3 | 2% Низкий | больше 11 лет назад |
| CVE-2015-2931 Incomplete blacklist vulnerability in includes/upload/UploadBase.php i ... | CVSS2: 4.3 | 2% Низкий | больше 11 лет назад |
| GHSA-m3mr-7w8m-ffxc Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an application/xml MIME type for a nested SVG with a data: URI. | 2% Низкий | больше 4 лет назад | |
| ALT-PU-2015-1935 ALT-PU-2015-1935: package `mediawiki` update to version 1.23.11-alt1 | CVSS3: 9.8 | около 11 лет назад |
Уязвимостей на страницу