A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.
References
Configurations
History
21 Nov 2024, 01:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104022.html - Mailing List, Release Notes, Third Party Advisory | |
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104027.html - Mailing List, Release Notes, Third Party Advisory | |
| References | () http://security.gentoo.org/glsa/glsa-201310-21.xml - Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2013/04/16/12 - Mailing List, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/59077 - Third Party Advisory, VDB Entry | |
| References | () https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-1951 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1951 - Issue Tracking, Third Party Advisory | |
| References | () https://phabricator.wikimedia.org/T48084 - Vendor Advisory | |
| References | () https://security-tracker.debian.org/tracker/CVE-2013-1951 - Third Party Advisory |
Information
Published : 2019-10-31 20:15
Updated : 2024-11-21 01:50
NVD link : CVE-2013-1951
Mitre link : CVE-2013-1951
CVE.ORG link : CVE-2013-1951
JSON object : View
Products Affected
debian
- debian_linux
mediawiki
- mediawiki
linux
- linux_kernel
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')