Lucene search
Ubuntu.comUB:CVE-2014-5243HistoryAug 22, 2014 - 12:00 a.m.
CVE-2014-5243
2014-08-2200:00:00
ubuntu.com
ubuntu.com
18
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
77.1%
MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x
before 1.23.2 does not enforce an IFRAME protection mechanism for
transcluded pages, which makes it easier for remote attackers to conduct
clickjacking attacks via a crafted web site.
Notes
| Author | Note |
|---|---|
| seth-arnold | bug not visible on 2014-08-14 |
Related
prion
prion
Code injection
2014-08-22 17:55:00
cvelist
cvelist
CVE-2014-5243
2014-08-22 17:00:00
nvd
nvd
CVE-2014-5243
2014-08-22 17:55:02
debiancve
debiancve
CVE-2014-5243
2014-08-22 17:55:02
cve
cve
CVE-2014-5243
2014-08-22 17:55:02
debian
debian
[SECURITY] [DSA 3011-1] mediawiki security update
2014-08-23 15:27:05
[SECURITY] [DSA 3011-1] mediawiki security update
2014-08-23 15:27:05
osv
osv
mediawiki - security update
2014-08-23 00:00:00
nessus
nessus
Debian DSA-3011-1 : mediawiki - security update
2014-08-25 00:00:00
MediaWiki < 1.19.18 / 1.22.9 / 1.23.2 Multiple Vulnerabilities
2014-08-13 00:00:00
Fedora 19 : mediawiki-1.23.2-1.fc19 (2014-9548)
2014-08-27 00:00:00
openvas
openvas
Debian Security Advisory DSA 3011-1 (mediawiki - security update)
2014-08-23 00:00:00
Debian: Security Advisory (DSA-3011-1)
2014-08-22 00:00:00
Mageia: Security Advisory (MGASA-2014-0309)
2022-01-28 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3011-1] mediawiki security update
2014-08-26 00:00:00
mageia
mageia
Updated mediawiki packages fix security vulnerabilities
2014-08-06 00:08:48
fedora
fedora
[SECURITY] Fedora 19 Update: mediawiki-1.23.2-1.fc19
2014-08-27 01:33:58
[SECURITY] Fedora 20 Update: mediawiki-1.23.2-1.fc20
2014-08-27 01:34:20
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2015-02-07 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.005
Percentile
77.1%
Related for UB:CVE-2014-5243