CVE

Id
74499  
CVE No.
CVE-2014-7199  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and 1.23.x before 1.23.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file.  
Phase
Assigned (20140926)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
695127 74499 CVE-2014-7199 MLIST:[MediaWiki-announce] 20140924 MediaWiki Security and Maintenance Releases: 1.19.19, 1.22.11 and 1.23.4  View
695128 74499 CVE-2014-7199 URL:https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-September/000161.html  View
695129 74499 CVE-2014-7199 MLIST:[oss-security] 20140927 Re: CVE request: Mediawiki before 1.19.19, 1.22.11 and 1.23.4 insufficient CSS filtering of SVGs  View
695130 74499 CVE-2014-7199 URL:http://www.openwall.com/lists/oss-security/2014/09/27/2  View
695131 74499 CVE-2014-7199 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=69008  View
695132 74499 CVE-2014-7199 CONFIRM:https://gerrit.wikimedia.org/r/#/c/162777/  View
695133 74499 CVE-2014-7199 DEBIAN:DSA-3036  View
695134 74499 CVE-2014-7199 URL:http://www.debian.org/security/2014/dsa-3036  View
695135 74499 CVE-2014-7199 SECUNIA:61666  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16079 JVNDB-2014-004954 Apt の changelog コマンドにおける任意のファイルに書き込まれる脆弱性 Apt の changelog コマンドには、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2014-7206 74499 3.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004954.html  View