Updated mediawiki packages fix security vulnerbilities

2014-10-0713:22:51

Gentoo Foundation

advisories.mageia.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.9%

JSON

Updated mediawiki packages fix security vulnerability: MediaWiki before 1.23.4 is vulnerable to cross-site scripting due to JavaScript injection via CSS in uploaded SVG files (CVE-2014-7199). MediaWiki before 1.23.5 is vulnerable to cross-site scripting due to JavaScript injection via user-specificed CSS in certain special pages (CVE-2014-7295).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchmediawiki< 1.23.5-1mediawiki-1.23.5-1.mga3
Mageia4noarchmediawiki< 1.23.5-1mediawiki-1.23.5-1.mga4