Mediawiki CSS Tags CVE-2013-4567 HTML Injection Vulnerability

Bugtraq ID:	63760
Class:	Input Validation Error
CVE:	CVE-2013-4567
Remote:	Yes
Local:	No
Published:	May 06 2013 12:00AM
Updated:	Apr 13 2015 09:58PM
Credit:	Kevin Israel (Wikipedia user PleaseStand)
Vulnerable:	MediaWiki Mediawiki 1.21.2 MediaWiki Mediawiki 1.21.1 MediaWiki Mediawiki 1.20.7 MediaWiki Mediawiki 1.20.6 MediaWiki Mediawiki 1.20.5 MediaWiki Mediawiki 1.20.4 MediaWiki Mediawiki 1.20.3 MediaWiki Mediawiki 1.20.2 MediaWiki Mediawiki 1.20.1 MediaWiki Mediawiki 1.19.8 MediaWiki Mediawiki 1.19.7 MediaWiki Mediawiki 1.19.6 MediaWiki Mediawiki 1.19.5 MediaWiki Mediawiki 1.19.4 MediaWiki Mediawiki 1.19.3 MediaWiki Mediawiki 1.19.2 MediaWiki Mediawiki 1.19.1 MediaWiki Mediawiki 1.20 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	MediaWiki Mediawiki 1.21.3 MediaWiki Mediawiki 1.20.8 MediaWiki Mediawiki 1.19.9

Mediawiki CSS Tags CVE-2013-4567 HTML Injection Vulnerability

Mediawiki is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

Versions prior to Mediawiki 1.19.9, 1.20.8 and 1.21.3 are vulnerable.