CVE-2015-2939

2015-04-1314:59:00

Debian Security Bug Tracker

security-tracker.debian.org

0.003 Low

EPSS

Percentile

68.3%

JSON

Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a function name, which is not properly handled in a Lua error backtrace.

OSVersionArchitecturePackageVersionFilename
Debian12allmediawiki< 1:1.19.20+dfsg-2.3mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian11allmediawiki< 1:1.19.20+dfsg-2.3mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian10allmediawiki< 1:1.19.20+dfsg-2.3mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian999allmediawiki< 1:1.19.20+dfsg-2.3mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian13allmediawiki< 1:1.19.20+dfsg-2.3mediawiki_1:1.19.20+dfsg-2.3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mediawiki	< 1:1.19.20+dfsg-2.3	mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian	11	all	mediawiki	< 1:1.19.20+dfsg-2.3	mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian	10	all	mediawiki	< 1:1.19.20+dfsg-2.3	mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian	999	all	mediawiki	< 1:1.19.20+dfsg-2.3	mediawiki_1:1.19.20+dfsg-2.3_all.deb
Debian	13	all	mediawiki	< 1:1.19.20+dfsg-2.3	mediawiki_1:1.19.20+dfsg-2.3_all.deb

0.003 Low

EPSS

Percentile

68.3%

JSON

Related for DEBIANCVE:CVE-2015-2939