PT-2015-4235 · Mediawiki+1 · Mediawiki Expandtemplates Extension+1

Pleasestand · Published 2015-01-16 · Updated 2015-02-21 · CVE-2014-9478

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MediaWiki ExpandTemplates extension (affected versions not specified)

Description A cross-site scripting (XSS) issue exists in the preview functionality of the ExpandTemplates extension for MediaWiki. This occurs when the $wgRawHTML setting is enabled, allowing remote attackers to inject arbitrary web script or HTML through the wpInput parameter to the "Special:ExpandTemplates" page.

Recommendations For the affected version of the MediaWiki ExpandTemplates extension, consider disabling the $wgRawHTML setting to prevent exploitation until a patch is available. As a temporary workaround, restrict access to the Special:ExpandTemplates page to minimize the risk of exploitation. Avoid using the wpInput parameter in the affected page until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2015-1194

CVE-2014-9478

Affected Products

Alt Linux

Mediawiki Expandtemplates Extension

References · 20

• 🔥 https://phabricator.wikimedia.org/T73111 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9477 · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1194 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9476 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9487 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9480 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9479 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9475 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9481 · Security Note
• https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-December/000173.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9478 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-9478 · Security Note
• https://phabricator.wikimedia.org/T77624 · Note
• https://phabricator.wikimedia.org/T77028 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2014-9478 · Note