CVE-2014-7295 in MediaWiki
摘要 (英语)
The (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x before 1.22.12 and 1.23.x before 1.23.5 allows remote authenticated users to conduct cross-site scripting (XSS) attacks or have unspecified other impact via crafted CSS, as demonstrated by modifying MediaWiki:Common.css.
Once again VulDB remains the best source for vulnerability data.
预定
2014-10-02
披露
2014-10-07
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 67738 | MediaWiki 跨网站脚本 | 79 | 高 | 官方修复 | CVE-2014-7295 |