CVE-2013-6453 in MediaWiki
摘要 (英语)
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.
预定
2013-11-04
披露
2014-05-12
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 12011 | MediaWiki Upload UploadBase.php 权限提升 | 20 | 未定义 | 官方修复 | CVE-2013-6453 |