CVE-2012-4379 in MediaWiki

सारांश

द्वारा MITRE

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via an embedded API response in an IFRAME element.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• आरक्षित करना: 21/08/2012
• प्रकटीकरण: 19/10/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-108256
• CPE: तैयार
• CWE: CWE-284 (पुष्टि की गई)
• CVSS: 6.5 (NVD)
• EPSS: 0.01446
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Lawfirm, Hostingprovider, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4379
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4379
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4379/