CVE

Id
70148  
CVE No.
CVE-2014-2853  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.  
Phase
Assigned (20140414)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
668859 70148 CVE-2014-2853 MLIST:[MediaWiki-announce] 20140424 MediaWiki Security and Maintenance Releases: 1.22.6 and 1.21.9  View
668860 70148 CVE-2014-2853 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-April/000149.html  View
668861 70148 CVE-2014-2853 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1091967  View
668862 70148 CVE-2014-2853 MISC:https://github.com/wikimedia/mediawiki-core/commit/0b695ae09aada343ab59be4a3c9963995a1143b6  View
668863 70148 CVE-2014-2853 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=63251  View
668864 70148 CVE-2014-2853 CONFIRM:https://www.mediawiki.org/wiki/Release_notes/1.21#Changes_since_1.21.8  View
668865 70148 CVE-2014-2853 CONFIRM:https://www.mediawiki.org/wiki/Release_notes/1.22#Changes_since_1.22.5  View
668866 70148 CVE-2014-2853 BID:67068  View
668867 70148 CVE-2014-2853 URL:http://www.securityfocus.com/bid/67068  View
668868 70148 CVE-2014-2853 SECTRACK:1030161  View
668869 70148 CVE-2014-2853 URL:http://www.securitytracker.com/id/1030161  View
668870 70148 CVE-2014-2853 SECUNIA:58262  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13276 JVNDB-2014-002151 PaperThin CommonSpot におけるクロスサイトスクリプティングの脆弱性 PaperThin CommonSpot には、不完全なブラックリストにより、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2014-2861 70148 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002151.html  View