CVE

Id
43773  
CVE No.
CVE-2010-1189  
Status
Candidate  
Description
MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."  
Phase
Assigned (20100330)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
476732 43773 CVE-2010-1189 MLIST:[MediaWiki-announce] 20100303 MediaWiki security update: 1.15.2  View
476733 43773 CVE-2010-1189 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html  View
476734 43773 CVE-2010-1189 DEBIAN:DSA-2022  View
476735 43773 CVE-2010-1189 URL:http://www.debian.org/security/2010/dsa-2022  View
476736 43773 CVE-2010-1189 SUSE:SUSE-SR:2010:010  View
476737 43773 CVE-2010-1189 URL:http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html  View
476738 43773 CVE-2010-1189 SECUNIA:39022  View
476739 43773 CVE-2010-1189 URL:http://secunia.com/advisories/39022  View
476740 43773 CVE-2010-1189 SECUNIA:39656  View
476741 43773 CVE-2010-1189 URL:http://secunia.com/advisories/39656  View
476742 43773 CVE-2010-1189 VUPEN:ADV-2010-0685  View
476743 43773 CVE-2010-1189 URL:http://www.vupen.com/english/advisories/2010/0685  View
476744 43773 CVE-2010-1189 VUPEN:ADV-2010-1001  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35527 JVNDB-2010-001307 VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性 VMware Server の WebAccess には、JSON エラーメッセージの処理に関して不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-1193 43773 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001307.html  View