PT-2011-2006 · Wikimedia · Mediawiki

Pleasestand · Publicado 2011-01-11 · Atualizado 2017-08-17 · CVE-2011-0003

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.16.1

Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors when user or site JavaScript or CSS is enabled.

Recommendations For versions prior to 1.16.1, update to version 1.16.1 or later to resolve the issue. As a temporary workaround, consider disabling user or site JavaScript and CSS until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-0003

DTSA-207-1

Produtos afetados

Mediawiki

Referências · 16

• https://nvd.nist.gov/vuln/detail/CVE-2011-0003 · Nota de Segurança
• http://openwall.com/lists/oss-security/2011/01/04/12 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0003 · Nota
• http://openwall.com/lists/oss-security/2011/01/04/6 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0003 · Aviso do Fabricante
• http://secunia.com/advisories/42810 · Aviso do Fabricante
• https://bugzilla.wikimedia.org/show_bug.cgi?id=26561 · Nota
• http://vupen.com/english/advisories/2011/0017 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-0003 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64476 · Nota
• https://osv.dev/vulnerability/CVE-2011-0003 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html · Aviso do Fabricante
• http://osvdb.org/70272 · Nota
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-January/000093.html · Aviso do Fabricante