CVE-2014-9475 in MediaWikiИнформация

Сводка

по MITRE

Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Резервировать

03.01.2015

Раскрытие

16.01.2015

Модерация

принято

Вход

2

Связать

показать

EPSS

0.01449

KEV

Нет

Деятельности

Очень низкий

Сектор

Hostingprovider, Lawfirm, ...

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-9475
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-9475
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-9475/

◂ ПредыдущийОбзорДалее ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!