[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

247085

 
 

909

 
 

194218

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3036-1 mediawiki -- mediawiki

ID: oval:org.secpod.oval:def:601788Date: (C)2014-10-13   (M)2022-10-10
Class: PATCHFamily: unix




It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting.

Platform:
Debian 7.0
Product:
mediawiki
Reference:
DSA-3036-1
CVE-2014-7199
CVE    1
CVE-2014-7199
CPE    34
cpe:/a:mediawiki:mediawiki:1.19.4
cpe:/a:mediawiki:mediawiki:1.19.3
cpe:/a:mediawiki:mediawiki:1.19.6
cpe:/a:mediawiki:mediawiki:1.19.5
...

© SecPod Technologies