Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-2932
HistoryApr 13, 2015 - 2:59 p.m.

CVE-2015-2932

2015-04-1314:59:00
Debian Security Bug Tracker
security-tracker.debian.org
12

0.004 Low

EPSS

Percentile

72.4%

Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via an animated href XLink element.