Updated mediawiki packages fix security vulnerability

2014-04-2822:16:23

Gentoo Foundation

advisories.mageia.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.1%

JSON

Updated mediawiki packages fix security vulnerability: XSS vulnerability in MediaWiki before 1.22.6, where if the default sort key is set to a string containing a script, the script will be executed when the page is viewed using the info action (CVE-2014-2853).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchmediawiki< 1.22.6-1mediawiki-1.22.6-1.mga3
Mageia4noarchmediawiki< 1.22.6-1mediawiki-1.22.6-1.mga4