MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2010-03-31 18:00
Updated : 2024-02-04 17:54
NVD link : CVE-2010-1189
Mitre link : CVE-2010-1189
CVE.ORG link : CVE-2010-1189
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE
CWE-20
Improper Input Validation