BID:25632

MediaWiki API Pretty-Printing Mode Cross-Site Scripting Vulnerability

Info

MediaWiki API Pretty-Printing Mode Cross-Site Scripting Vulnerability

Bugtraq ID:	25632
Class:	Input Validation Error
CVE:	CVE-2007-4828
Remote:	Yes
Local:	No
Published:	Sep 11 2007 12:00AM
Updated:	Apr 16 2015 06:09PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Red Hat Fedora Core7 MediaWiki MediaWiki 1.10.1 MediaWiki MediaWiki 1.9.3 MediaWiki MediaWiki 1.9.2 MediaWiki MediaWiki 1.9.1 MediaWiki MediaWiki 1.9 MediaWiki MediaWiki 1.8.4 MediaWiki MediaWiki 1.8.3 MediaWiki MediaWiki 1.8.2 MediaWiki MediaWiki 1.8.1 MediaWiki MediaWiki 1.8 MediaWiki MediaWiki 1.9.0rc2 MediaWiki MediaWiki 1.9.0rc1 MediaWiki MediaWiki 1.11.0rc1 MediaWiki MediaWiki 1.11 MediaWiki MediaWiki 1.10

Not Vulnerable:	MediaWiki MediaWiki 1.11 MediaWiki MediaWiki 1.10.2 MediaWiki MediaWiki 1.9.4 MediaWiki MediaWiki 1.8.5

Discussion

MediaWiki API Pretty-Printing Mode Cross-Site Scripting Vulnerability

MediaWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

NOTE: Some versions will be vulnerable only if '$wgEnableAPI' has been enabled.

Exploit / POC

MediaWiki API Pretty-Printing Mode Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

Solution / Fix

MediaWiki API Pretty-Printing Mode Cross-Site Scripting Vulnerability

Solution:
The vendor released updates to address this issue. Please see the references for more information.

MediaWiki MediaWiki 1.9.0rc2