PT-2012-6278 · Mediawiki · Mediawiki Rss Reader Extension

Thorsten Glaser · Publicado 2012-12-31 · Atualizado 2012-12-31 · CVE-2012-6453

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki RSS Reader extension versions prior to 0.2.6

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via a crafted feed.

Recommendations For versions prior to 0.2.6, update to version 0.2.6 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-6453

DSA-2596-1

Produtos afetados

Mediawiki Rss Reader Extension

Referências · 3

• http://bugs.debian.org/696179 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6453 · Nota de Segurança
• http://mediawiki.org/wiki/Extension:RSS_Reader#0.2.6 · Nota