Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/B3637B4143317F3EF89506F8A87A1616
HistoryJun 13, 2019 - 12:00 a.m.

Security fix for the ALT Linux 9 package mediawiki version 1.32.2-alt1

2019-06-1300:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
25

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

1.32.2-alt1 built June 13, 2019 Vitaly Lipatov in task #231690

June 6, 2019 Vitaly Lipatov

- new version 1.32.2 (with rpmrb script)
- CVE-2019-12468, CVE-2019-12473, CVE-2019-12471
- CVE-2019-12472, CVE-2019-12474, CVE-2019-12467
- CVE-2019-12466, CVE-2019-12469, CVE-2019-12470
- CVE-2019-11358
OSVersionArchitecturePackageVersionFilename
ALT Linux9srcmediawiki-1.36.1-alt1.src.rpm< 1.32.2-alt1mediawiki-1.36.1-alt1.src.rpm
ALT Linux9noarchmediawiki-1.36.1-alt1.noarch.rpm< 1.32.2-alt1mediawiki-1.36.1-alt1.noarch.rpm
ALT Linux9noarchmediawiki-apache2-1.36.1-alt1.noarch.rpm< 1.32.2-alt1mediawiki-apache2-1.36.1-alt1.noarch.rpm
ALT Linux9noarchmediawiki-common-1.36.1-alt1.noarch.rpm< 1.32.2-alt1mediawiki-common-1.36.1-alt1.noarch.rpm
ALT Linux9noarchmediawiki-extensions-pdfhandler-1.36.1-alt1.noarch.rpm< 1.32.2-alt1mediawiki-extensions-PdfHandler-1.36.1-alt1.noarch.rpm
ALT Linux9noarchmediawiki-extensions-syntaxhighlight_geshi-1.36.1-alt1.noarch.rpm< 1.32.2-alt1mediawiki-extensions-SyntaxHighlight_GeSHi-1.36.1-alt1.noarch.rpm
ALT Linux9noarchmediawiki-mysql-1.36.1-alt1.noarch.rpm< 1.32.2-alt1mediawiki-mysql-1.36.1-alt1.noarch.rpm
ALT Linux9noarchmediawiki-postgresql-1.36.1-alt1.noarch.rpm< 1.32.2-alt1mediawiki-postgresql-1.36.1-alt1.noarch.rpm

Related

nessus 26
debian 6
mageia 1
openvas 34
osv 17
freebsd 2
veracode 10
ubuntucve 10
prion 10
debiancve 10
cve 11
ibm 18
atlassian 9
hackerone 1
joomla 1
drupal 1
typo3 1
f5 1
symantec 1
redhat 6
github 1
githubexploit 4
alpinelinux 1
checkpoint_advisories 1
fedora 8
amazon 1
redhatcve 1
oraclelinux 1
attackerkb 1
cnvd 1
archlinux 1
altlinux 1
rocky 1
nessus
nessus
FreeBSD : mediawiki -- multiple vulnerabilities (3c5a4fe0-9ebb-11e9-9169-fcaa147e860e)
2019-07-05 00:00:00
Debian DSA-4460-1 : mediawiki - security update
2019-06-13 00:00:00
Fedora 30 : drupal7 (2019-2a0ce0c58c)
2019-05-09 00:00:00
debian
debian
[SECURITY] [DSA 4460-1] mediawiki security update
2019-06-11 22:27:04
[SECURITY] [DSA 4434-1] drupal7 security update
2019-04-20 12:03:09
[SECURITY] [DLA 1777-1] jquery security update
2019-05-06 07:42:05
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2019-09-15 17:45:31
openvas
openvas
Debian: Security Advisory (DSA-4460-1)
2019-06-13 00:00:00
Mageia: Security Advisory (MGASA-2019-0279)
2022-01-28 00:00:00
MediaWiki <= 1.32.1 Multiple Vulnerabilities - Linux
2019-07-16 00:00:00
osv
osv
mediawiki - security update
2019-06-12 00:00:00
CVE-2019-12473
2019-07-10 16:15:11
CVE-2019-12466
2019-07-10 16:15:11
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2019-04-23 00:00:00
Django -- AdminURLFieldWidget XSS
2019-06-03 00:00:00
veracode
veracode
Incorrect Access Control
2019-07-11 01:00:18
Denial Of Service (DoS)
2019-07-11 03:33:44
Insecure Access Controls
2019-07-11 10:43:49
ubuntucve
ubuntucve
CVE-2019-12467
2019-07-10 00:00:00
CVE-2019-12468
2019-07-10 00:00:00
CVE-2019-12470
2019-07-10 00:00:00
prion
prion
Improper access control
2019-07-10 16:15:00
Code injection
2019-07-10 16:15:00
Cross site request forgery (csrf)
2019-07-10 16:15:00
debiancve
debiancve
CVE-2019-12474
2019-07-10 16:15:00
CVE-2019-12469
2019-07-10 17:15:00
CVE-2019-12473
2019-07-10 16:15:00
cve
cve
CVE-2019-12469
2019-07-10 17:15:00
CVE-2019-12471
2019-07-10 16:15:00
CVE-2019-12472
2019-07-10 16:15:00
ibm
ibm
Security Bulletin: IBM Security Guardium Insights is affected by a jQuery vulnerabilitiy (CVE-2019-11358)
2021-10-06 12:30:35
Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2019-11358)
2019-12-06 20:52:02
Security Bulletin: A vulnerability in jQuery affects the IBM Performance Management product (CVE-2019-11358)
2020-04-14 11:18:19
atlassian
atlassian
Address CVE-2019-11358 in the bundled version of jQuery
2019-07-08 22:57:45
Update jQuery to address CVE-2019-11358
2019-08-01 05:11:29
jQuery 2.2.4 is vulnerable to prototype pollution
2019-05-13 01:57:29
hackerone
hackerone
Node.js third-party modules: Prototype pollution attack through jQuery $.extend
2018-12-03 15:53:20
joomla
joomla
[20190403] - Core - Object.prototype pollution in JQuery $.extend
2019-03-25 00:00:00
drupal
drupal
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-006
2019-04-17 00:00:00
typo3
typo3
Cross-Site Scripting in jQuery before 3.4.0
2019-05-07 00:00:00
f5
f5
K20455158 : jQuery vulnerability CVE-2019-11358
2020-04-14 00:00:00
symantec
symantec
JQuery CVE-2019-11358 Cross Site Scripting Vulnerability
2019-04-17 00:00:00
redhat
redhat
(RHSA-2020:1325) Moderate: python-XStatic-jQuery security update
2020-04-06 08:40:52
(RHSA-2020:5581) Moderate: python-XStatic-jQuery security update
2020-12-16 12:57:14
(RHSA-2019:2587) Moderate: CloudForms 4.7.9 security, bug fix and enhancement update
2019-09-05 05:18:52
github
github
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
2019-04-26 16:29:11
githubexploit
githubexploit
Exploit for Prototype Pollution in Jquery
2021-03-08 11:34:11
Exploit for Prototype Pollution in Jquery
2020-12-01 09:18:58
Exploit for Prototype Pollution in Jquery
2019-07-18 19:15:33
alpinelinux
alpinelinux
CVE-2019-11358
2019-04-20 00:29:00
checkpoint_advisories
checkpoint_advisories
jQuery Prototype Pollution Object Cross-Site Scripting (CVE-2019-11358)
2019-04-29 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: drupal7-7.66-1.fc30
2019-05-09 01:34:20
[SECURITY] Fedora 29 Update: drupal7-7.66-1.fc29
2019-05-09 03:18:10
[SECURITY] Fedora 30 Update: drupal7-7.69-1.fc30
2020-01-04 22:16:18
amazon
amazon
Medium: pcs
2023-01-18 00:16:00
redhatcve
redhatcve
CVE-2019-11358
2021-07-18 00:15:31
oraclelinux
oraclelinux
pcs security update
2022-11-03 00:00:00
attackerkb
attackerkb
CVE-2019-11358
2019-04-20 00:00:00
cnvd
cnvd
Silverstripe framework cross-site scripting vulnerability
2022-11-23 00:00:00
archlinux
archlinux
[ASA-201906-2] python-django: cross-site scripting
2019-06-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package phpipam version 1.42.027-alt1
2020-10-21 00:00:00
rocky
rocky
pcs security, bug fix, and enhancement update
2021-11-09 08:21:49

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON
Related for B3637B4143317F3EF89506F8A87A1616
nessus26debian6mageia1openvas34osv17freebsd2veracode10ubuntucve10prion10debiancve10cve11ibm18atlassian9hackerone1joomla1drupal1typo31f51symantec1redhat6github1githubexploit4alpinelinux1checkpoint_advisories1fedora8amazon1redhatcve1oraclelinux1attackerkb1cnvd1archlinux1altlinux1rocky1