CVE

Id
64515  
CVE No.
CVE-2013-4568  
Status
Candidate  
Description
Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain non-ASCII characters in CSS, as demonstrated using variations of "expression" containing (1) full width characters or (2) IPA extensions, which are converted and rendered by Internet Explorer.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635887 64515 CVE-2013-4568 MLIST:[MediaWiki-announce] 20131114 MediaWiki Security Release: 1.21.3, 1.20.8 and 1.19.9  View
635888 64515 CVE-2013-4568 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-November/000135.html  View
635889 64515 CVE-2013-4568 MISC:https://bugzilla.wikimedia.org/attachment.cgi?id=13452&action=diff  View
635890 64515 CVE-2013-4568 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=55332  View
635891 64515 CVE-2013-4568 DEBIAN:DSA-2891  View
635892 64515 CVE-2013-4568 URL:http://www.debian.org/security/2014/dsa-2891  View
635893 64515 CVE-2013-4568 FEDORA:FEDORA-2013-21856  View
635894 64515 CVE-2013-4568 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/123011.html  View
635895 64515 CVE-2013-4568 FEDORA:FEDORA-2013-21874  View
635896 64515 CVE-2013-4568 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/122998.html  View
635897 64515 CVE-2013-4568 BID:63761  View
635898 64515 CVE-2013-4568 URL:http://www.securityfocus.com/bid/63761  View
635899 64515 CVE-2013-4568 SECUNIA:57472  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23731 JVNDB-2013-005306 MediaWiki 用 ZeroRatedMobileAccess 拡張機能におけるクロスサイトスクリプティングの脆弱性 MediaWiki 用 ZeroRatedMobileAccess 拡張機能には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4573 64515 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005306.html  View