MGASA-2014-0400
- Source
- https://advisories.mageia.org/MGASA-2014-0400.html
- Import Source
- https://advisories.mageia.org/MGASA-2014-0400.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2014-0400
- Related
- Published
- 2014-10-07T09:22:51Z
- Modified
- 2014-10-07T09:00:41Z
- Summary
- Updated mediawiki packages fix security vulnerbilities
- Details
-
Updated mediawiki packages fix security vulnerability:
MediaWiki before 1.23.4 is vulnerable to cross-site scripting due to JavaScript injection via CSS in uploaded SVG files (CVE-2014-7199).
MediaWiki before 1.23.5 is vulnerable to cross-site scripting due to JavaScript injection via user-specificed CSS in certain special pages (CVE-2014-7295).
- References
-
- https://advisories.mageia.org/MGASA-2014-0400.html
- https://bugs.mageia.org/show_bug.cgi?id=14182
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-September/000161.html
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-October/000163.html
- https://www.debian.org/security/2014/dsa-3036
- https://www.debian.org/security/2014/dsa-3046
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:4 / mediawiki
Package
- Name
- mediawiki
- Purl
- pkg:rpm/mageia/mediawiki?distro=mageia-4
Mageia:3 / mediawiki
Package
- Name
- mediawiki
- Purl
- pkg:rpm/mageia/mediawiki?distro=mageia-3