MediaWiki Versions Prior to 1.16.3 Multiple Remote Vulnerabilities
BID:47354
Info
MediaWiki Versions Prior to 1.16.3 Multiple Remote Vulnerabilities
| Bugtraq ID: | 47354 |
| Class: | Unknown |
| CVE: |
CVE-2011-1578 CVE-2011-1579 CVE-2011-1580 CVE-2011-1587 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 13 2011 12:00AM |
| Updated: | Apr 13 2015 09:41PM |
| Credit: | Masato Kinugawa, Suffusion of Yellow and the vendor. <br> |
| Vulnerable: |
MediaWiki MediaWiki 1.16.3 MediaWiki MediaWiki 1.16.2 MediaWiki MediaWiki 1.16.1 MediaWiki MediaWiki 1.15.5 MediaWiki MediaWiki 1.15.4 MediaWiki MediaWiki 1.15.3 MediaWiki MediaWiki 1.15.2 MediaWiki MediaWiki 1.15.1 MediaWiki MediaWiki 1.15 MediaWiki MediaWiki 1.14.1 MediaWiki MediaWiki 1.14 MediaWiki MediaWiki 1.13.4 MediaWiki MediaWiki 1.13.3 MediaWiki MediaWiki 1.13.2 MediaWiki MediaWiki 1.13.1 MediaWiki MediaWiki 1.13 MediaWiki MediaWiki 1.12.4 MediaWiki MediaWiki 1.12.2 MediaWiki MediaWiki 1.12.1 MediaWiki MediaWiki 1.12 MediaWiki MediaWiki 1.11.2 MediaWiki MediaWiki 1.11.1 MediaWiki MediaWiki 1.11 MediaWiki MediaWiki 1.10.3 MediaWiki MediaWiki 1.10.2 MediaWiki MediaWiki 1.10.1 MediaWiki MediaWiki 1.16.0beta3 MediaWiki MediaWiki 1.16.0beta2 MediaWiki MediaWiki 1.16 MediaWiki MediaWiki 1.12 MediaWiki MediaWiki 1.11.0rc1 MediaWiki MediaWiki 1.11 MediaWiki MediaWiki 1.10 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
MediaWiki MediaWiki 1.16.4 |
Discussion
MediaWiki Versions Prior to 1.16.3 Multiple Remote Vulnerabilities
MediaWiki is prone to multiple remote vulnerabilities, including:
1. A cross-site scripting vulnerability
2. An HTML-injection vulnerability
3. An unauthorized-access vulnerability
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the website, steal cookie-based authentication credentials, and perform remote imports from certain sources.
Versions prior to MediaWiki 1.16.3 are vulnerable.
MediaWiki is prone to multiple remote vulnerabilities, including:
1. A cross-site scripting vulnerability
2. An HTML-injection vulnerability
3. An unauthorized-access vulnerability
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the website, steal cookie-based authentication credentials, and perform remote imports from certain sources.
Versions prior to MediaWiki 1.16.3 are vulnerable.
Exploit / POC
MediaWiki Versions Prior to 1.16.3 Multiple Remote Vulnerabilities
Attackers can exploit these issues through a browser. To exploit a cross-site scripting vulnerability an attacker must entice an unsuspecting victim to follow a malicious URI.
Attackers can exploit these issues through a browser. To exploit a cross-site scripting vulnerability an attacker must entice an unsuspecting victim to follow a malicious URI.
Solution / Fix
MediaWiki Versions Prior to 1.16.3 Multiple Remote Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
NOTE: Initial fixes for CVE-2011-1578 did not completely resolve the issue. Additional vendor updates are available.
Solution:
Updates are available. Please see the references for more information.
NOTE: Initial fixes for CVE-2011-1578 did not completely resolve the issue. Additional vendor updates are available.
References
MediaWiki Versions Prior to 1.16.3 Multiple Remote Vulnerabilities
References:
References:
- [MediaWiki-announce] MediaWiki security release 1.16.3 (MediaWiki)
- MediaWiki Homepage (MediaWiki)
- MediaWiki security release 1.16.4 (MediaWiki)