BID:14181

MediaWiki Page Move Cross-Site Scripting Vulnerability

Info

MediaWiki Page Move Cross-Site Scripting Vulnerability

Bugtraq ID:	14181
Class:	Input Validation Error
CVE:	CVE-2005-2215
Remote:	Yes
Local:	No
Published:	Jul 07 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	The vendor is credited with the discovery of this vulnerability.
Vulnerable:	S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 MediaWiki MediaWiki 1.5 beta2 MediaWiki MediaWiki 1.5 beta1 MediaWiki MediaWiki 1.5 alpha2 MediaWiki MediaWiki 1.5 alpha1 MediaWiki MediaWiki 1.4.5 MediaWiki MediaWiki 1.4.3 MediaWiki MediaWiki 1.4.2 MediaWiki MediaWiki 1.4.1 MediaWiki MediaWiki 1.4 beta6

Not Vulnerable:	MediaWiki MediaWiki 1.5 beta3 MediaWiki MediaWiki 1.4.6

Discussion

MediaWiki Page Move Cross-Site Scripting Vulnerability

MediaWiki is prone to cross-site scripting attacks. This issue is due to a failure of proper sanitization of input variables by the application.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

Exploit / POC

MediaWiki Page Move Cross-Site Scripting Vulnerability

No exploit is required.

Solution / Fix

MediaWiki Page Move Cross-Site Scripting Vulnerability

Solution:
The vendor has released an upgrade. All versions up to and including 1.4.5 should be upgraded.

SUSE has released a security summary report (SUSE-SR:2005:019) addressing this and other issues. Please see the referenced advisory for further information.

MediaWiki MediaWiki 1.4 beta6