CVE-2015-6730

2015-09-0114:59:00

Debian Security Bug Tracker

security-tracker.debian.org

0.003 Low

EPSS

Percentile

66.0%

JSON

Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the f parameter, which is not properly handled in an error page, related to “ForeignAPI images.”

OSVersionArchitecturePackageVersionFilename
Debian12allmediawiki< 1:1.25.5-1mediawiki_1:1.25.5-1_all.deb
Debian11allmediawiki< 1:1.25.5-1mediawiki_1:1.25.5-1_all.deb
Debian10allmediawiki< 1:1.25.5-1mediawiki_1:1.25.5-1_all.deb
Debian999allmediawiki< 1:1.25.5-1mediawiki_1:1.25.5-1_all.deb
Debian13allmediawiki< 1:1.25.5-1mediawiki_1:1.25.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mediawiki	< 1:1.25.5-1	mediawiki_1:1.25.5-1_all.deb
Debian	11	all	mediawiki	< 1:1.25.5-1	mediawiki_1:1.25.5-1_all.deb
Debian	10	all	mediawiki	< 1:1.25.5-1	mediawiki_1:1.25.5-1_all.deb
Debian	999	all	mediawiki	< 1:1.25.5-1	mediawiki_1:1.25.5-1_all.deb
Debian	13	all	mediawiki	< 1:1.25.5-1	mediawiki_1:1.25.5-1_all.deb

0.003 Low

EPSS

Percentile

66.0%

JSON

Related for DEBIANCVE:CVE-2015-6730