CVE-2014-9478 in MediaWiki信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML via the wpInput parameter to the Special:ExpandTemplates page.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2015-01-03

披露

2015-01-16

管理

已接受

条目

VDB-73686

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

9.8 (VulDB)

EPSS

0.01200

KEV

否

活动

非常低

部门

Lawfirm, Hostingprovider, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-9478
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-9478
CVE Details	https://www.cvedetails.com/cve/CVE-2014-9478/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!