Mediawiki CSS Tags CVE-2013-4568 HTML Injection Vulnerability
BID:63761
Info
Mediawiki CSS Tags CVE-2013-4568 HTML Injection Vulnerability
| Bugtraq ID: | 63761 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-4568 |
| Remote: | Yes |
| Local: | No |
| Published: | May 06 2013 12:00AM |
| Updated: | Apr 13 2015 10:25PM |
| Credit: | Kevin Israel (Wikipedia user PleaseStand) |
| Vulnerable: |
MediaWiki Mediawiki 1.21.2 MediaWiki Mediawiki 1.21.1 MediaWiki Mediawiki 1.20.7 MediaWiki Mediawiki 1.20.6 MediaWiki Mediawiki 1.20.5 MediaWiki Mediawiki 1.20.4 MediaWiki Mediawiki 1.20.3 MediaWiki Mediawiki 1.20.2 MediaWiki Mediawiki 1.20.1 MediaWiki Mediawiki 1.19.8 MediaWiki Mediawiki 1.19.7 MediaWiki Mediawiki 1.19.6 MediaWiki Mediawiki 1.19.5 MediaWiki Mediawiki 1.19.4 MediaWiki Mediawiki 1.19.3 MediaWiki Mediawiki 1.19.2 MediaWiki Mediawiki 1.19.1 MediaWiki Mediawiki 1.20 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
MediaWiki Mediawiki 1.21.3 MediaWiki Mediawiki 1.20.8 MediaWiki Mediawiki 1.19.9 |
Discussion
References
Mediawiki CSS Tags CVE-2013-4568 HTML Injection Vulnerability
References:
References:
- [MediaWiki-announce] MediaWiki Security Release: 1.21.3, 1.20.8 and 1.19.9 (MediaWiki)
- Bug 1030987 - (CVE-2013-4567, CVE-2013-4568, CVE-2013-4572) CVE-2013-4567 CVE-20 (Red Hat Bugzilla)
- Bug 55332 - Sanitizer::checkCss blacklist can be bypassed using vertical tab (AS (MediaWiki)
- Full release notes for 1.19.9 (MediaWiki )
- Full release notes for 1.20.8 (MediaWiki )
- Full release notes for 1.21.3 (MediaWiki )
- MediaWiki Homepage (MediaWiki)