Updated mediawiki packages fix security vulnerability

2014-04-2822:16:23

Gentoo Foundation

advisories.mageia.org

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

70.5%

JSON

Updated mediawiki packages fix security vulnerability: XSS vulnerability in MediaWiki before 1.22.6, where if the default sort key is set to a string containing a script, the script will be executed when the page is viewed using the info action (CVE-2014-2853).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchmediawiki< 1.22.6-1mediawiki-1.22.6-1.mga3
Mageia4noarchmediawiki< 1.22.6-1mediawiki-1.22.6-1.mga4