Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4303
HistoryDec 11, 2019 - 7:15 p.m.

CVE-2013-4303

2019-12-1119:15:12
CWE-79
[email protected]
web.nvd.nist.gov
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.006

Percentile

79.5%

JSON

includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does not properly detect extensions when there are an even number of “.” (period) characters in a string, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the siprop parameter in a query action to wiki/api.php.

Affected configurations

Nvd
Node
mediawikimediawikiRange1.19.0–1.19.8
OR
mediawikimediawikiRange1.20.0–1.20.7
OR
mediawikimediawikiRange1.21.0–1.21.2
VendorProductVersionCPE
mediawikimediawiki*cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Related

debiancve 1
cve 1
ubuntucve 1
prion 1
cvelist 1
nessus 6
openvas 6
fedora 3
mageia 1
securityvulns 2
gentoo 1
debiancve
debiancve
CVE-2013-4303
2019-12-11 19:15:12
cve
cve
CVE-2013-4303
2019-12-11 19:15:12
ubuntucve
ubuntucve
CVE-2013-4303
2019-12-11 00:00:00
prion
prion
Cross site scripting
2019-12-11 19:15:00
cvelist
cvelist
CVE-2013-4303
2019-12-11 18:30:37
nessus
nessus
Fedora 19 : mediawiki-1.21.2-1.fc19 (2013-15984)
2013-09-21 00:00:00
Fedora 18 : mediawiki-1.19.8-1.fc18 (2013-15994)
2013-09-21 00:00:00
Mandriva Linux Security Advisory : mediawiki (MDVSA-2013:235)
2013-09-17 00:00:00
openvas
openvas
Fedora Update for mediawiki FEDORA-2013-15984
2013-09-24 00:00:00
Mageia: Security Advisory (MGASA-2013-0276)
2022-01-28 00:00:00
Fedora Update for mediawiki FEDORA-2013-15984
2013-09-24 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: mediawiki-1.21.2-1.fc19
2013-09-20 16:26:42
[SECURITY] Fedora 20 Update: mediawiki-1.21.2-1.fc20
2013-09-23 00:16:58
[SECURITY] Fedora 18 Update: mediawiki-1.19.8-1.fc18
2013-09-20 16:25:33
mageia
mageia
Updated mediawiki package fixes security vulnerabilities
2013-09-14 00:15:05
securityvulns
securityvulns
[ MDVSA-2013:235 ] mediawiki
2013-10-03 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-10-03 00:00:00
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2013-10-28 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.006

Percentile

79.5%

JSON
Related for NVD:CVE-2013-4303
debiancve1cve1ubuntucve1prion1cvelist1nessus6openvas6fedora3mageia1securityvulns2gentoo1