PT-2014-6359 · Wikimedia+1 · Mediawiki+1

Published 2014-08-05 · Updated 2017-01-07 · CVE-2014-5241

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.19.18 MediaWiki versions 1.20.x through 1.22.x before 1.22.9 MediaWiki versions 1.23.x before 1.23.2

Description The issue concerns the JSONP endpoint in MediaWiki, which does not properly restrict certain long callback values and the initial bytes of a JSONP response. This allows remote attackers to conduct cross-site request forgery (CSRF) attacks and obtain sensitive information via a crafted OBJECT element with SWF content consistent with a restricted character set. The API endpoint in question is "includes/api/ApiFormatJson.php".

Recommendations For MediaWiki versions prior to 1.19.18, update to version 1.19.18 or later. For MediaWiki versions 1.20.x through 1.22.x before 1.22.9, update to version 1.22.9 or later. For MediaWiki versions 1.23.x before 1.23.2, update to version 1.23.2 or later.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

ALT-PU-2014-2021

CVE-2014-5241

DSA-3011-1

MGASA-2014-0309

Affected Products

Alt Linux

Mediawiki

References · 23

• 🔥 https://bugzilla.wikimedia.org/show_bug.cgi?id=68187 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5241 · Security Note
• https://errata.altlinux.org/ALT-PU-2014-2021 · Vendor Advisory
• http://debian.org/security/2014/dsa-3011 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2014:153 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-5241 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5243 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-5241 · Security Note
• https://osv.dev/vulnerability/CVE-2014-5241 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-5241 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0309 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5242 · Security Note
• https://advisories.mageia.org/MGASA-2014-0309.html · Security Note
• https://bugzilla.wikimedia.org/show_bug.cgi?id=65778 · Note
• https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-July/000157.html · Note