CVE-2014-3966
EPSS 0.32%mediawiki - security update
發布日:2014/6/6修改日:2026/4/28
描述
Cross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1.21.x before 1.21.10, and 1.22.x before 1.22.7, when wgRawHtml is enabled, allows remote attackers to inject arbitrary web script or HTML via an invalid username.
受影響套件(2)
- Debian/mediawikifrom 0, < 1:1.19.16+dfsg-1
- Debian/mediawikifrom 0, < 1:1.19.16+dfsg-0+deb7u1