MediaWiki 'text' Prameter HTML Injection Vulnerability

Bugtraq ID:	65906
Class:	Input Validation Error
CVE:	CVE-2014-2244
Remote:	Yes
Local:	No
Published:	Feb 28 2014 12:00AM
Updated:	Apr 13 2015 10:08PM
Credit:	The vendor reported this issue.
Vulnerable:	MediaWiki Mediawiki 1.21.4 MediaWiki Mediawiki 1.21.3 MediaWiki Mediawiki 1.21.2 MediaWiki Mediawiki 1.21.1 MediaWiki Mediawiki 1.19.10 MediaWiki Mediawiki 1.19.9 MediaWiki Mediawiki 1.19.8 MediaWiki Mediawiki 1.19.7 MediaWiki Mediawiki 1.19.6 MediaWiki Mediawiki 1.19.5 MediaWiki Mediawiki 1.19.4 MediaWiki Mediawiki 1.19.3 MediaWiki Mediawiki 1.19.2 MediaWiki Mediawiki 1.22.2 MediaWiki Mediawiki 1.22.1 MediaWiki Mediawiki 1.21.5 MediaWiki Mediawiki 1.19.11 Mandriva Business Server 1 X86 64 Mandriva Business Server 1
Not Vulnerable:	MediaWiki Mediawiki 1.22.3 MediaWiki Mediawiki 1.21.6 MediaWiki Mediawiki 1.19.12

MediaWiki 'text' Prameter HTML Injection Vulnerability

MediaWiki is prone to a HTML injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Note: This issue was previously discussed in BID 65883 (MediaWiki Multiple Security Vulnerabilities) but has been given its own record to better document it.

Versions prior to MediaWiki 1.22.3, 1.21.6 and 1.19.12 are vulnerable.

MediaWiki 'text' Prameter HTML Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva mediawiki-1.22.3-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva mediawiki-ldapauthentication-2.0f-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva mediawiki-mysql-1.22.3-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva mediawiki-pgsql-1.22.3-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva mediawiki-sqlite-1.22.3-1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/

MediaWiki 'text' Prameter HTML Injection Vulnerability

References:

• MediaWiki Homepage (MediaWiki)
  
• Bug 1071139 - (CVE-2014-2244) CVE-2014-2244 mediawiki: HTML injection (Red Hat)
  
• HTML formatter for debug output from API allows HTML injection (WikiMedia)
  
• MediaWiki Security and Maintenance Releases: 1.22.3, 1.21.6 and 1.19.12 (WikiMedia)