PT-2015-4235 · Mediawiki+1 · Mediawiki Expandtemplates Extension+1

Pleasestand · Publicado 2015-01-16 · Atualizado 2015-02-21 · CVE-2014-9478

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki ExpandTemplates extension (affected versions not specified)

Description A cross-site scripting (XSS) issue exists in the preview functionality of the ExpandTemplates extension for MediaWiki. This occurs when the $wgRawHTML setting is enabled, allowing remote attackers to inject arbitrary web script or HTML through the wpInput parameter to the "Special:ExpandTemplates" page.

Recommendations For the affected version of the MediaWiki ExpandTemplates extension, consider disabling the $wgRawHTML setting to prevent exploitation until a patch is available. As a temporary workaround, restrict access to the Special:ExpandTemplates page to minimize the risk of exploitation. Avoid using the wpInput parameter in the affected page until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2015-1194

CVE-2014-9478

Produtos afetados

Alt Linux

Mediawiki Expandtemplates Extension

Referências · 20

• 🔥 https://phabricator.wikimedia.org/T73111 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9477 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2015-1194 · Aviso do Fabricante
• https://phabricator.wikimedia.org/T77624 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9476 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9487 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9480 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9479 · Nota de Segurança
• https://phabricator.wikimedia.org/T77028 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9475 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2014-9478 · Nota
• https://phabricator.wikimedia.org/T76195 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9478 · Nota
• http://openwall.com/lists/oss-security/2015/01/03/13 · Nota
• http://openwall.com/lists/oss-security/2014/12/21/2 · Nota