CVE-2012-4379 in MediaWiki

Resumen

por MITRE

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via an embedded API response in an IFRAME element.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 2012-08-21
• Divulgación: 2017-10-19
• Moderación: aceptado
• Artículo: VDB-108256
• CPE: listo
• CWE: CWE-284 (confirmado)
• CVSS: 6.5 (NVD)
• EPSS: 0.01446
• KEV: no
• Actividades: muy bajo
• Sector: Agriculture, Lawfirm, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4379
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4379
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4379/