MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:13
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - | |
References | () http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html - Patch, Vendor Advisory | |
References | () http://secunia.com/advisories/39022 - Vendor Advisory | |
References | () http://secunia.com/advisories/39656 - | |
References | () http://www.debian.org/security/2010/dsa-2022 - | |
References | () http://www.vupen.com/english/advisories/2010/0685 - Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2010/1001 - |
Information
Published : 2010-03-31 18:00
Updated : 2024-11-21 01:13
NVD link : CVE-2010-1189
Mitre link : CVE-2010-1189
CVE.ORG link : CVE-2010-1189
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE
CWE-20
Improper Input Validation