CVE-2014-9475
EPSS 0.16%mediawiki - security update
發布日:2015/1/16修改日:2026/4/28
也稱為:DEBIAN-CVE-2014-9475
描述
Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message.
受影響套件(2)
- Debian/mediawikifrom 0, < 1:1.19.20+dfsg-2.2
- Debian/mediawikifrom 0, < 1:1.19.20+dfsg-0+deb7u3