PT-2011-3233 · Wikimedia · Mediawiki

Suffusion Of Yellow · Published 2011-04-27 · Updated 2017-08-17 · CVE-2011-1579

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.16.3

Description The issue concerns the checkCss function in the wikitext parser, which fails to properly validate Cascading Style Sheets (CSS) token sequences. This allows remote attackers to conduct cross-site scripting (XSS) attacks or obtain sensitive information by using specific hex strings, such as 2f2a and 2a2f, to surround CSS comments.

Recommendations For versions prior to 1.16.3, update to version 1.16.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of CSS comments in the wikitext parser until a patch is applied.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1579

DSA-2366-1

Affected Products

Mediawiki

References · 22

• 🔥 http://mediawiki.org/wiki/Special:Code/MediaWiki/85856 · Exploit
• http://secunia.com/advisories/44142 · Vendor Advisory
• http://debian.org/security/2011/dsa-2366 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1579 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1579 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0978 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html · Vendor Advisory
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1579 · Security Note
• https://osv.dev/vulnerability/CVE-2011-1579 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/1151 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66738 · Note