Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43694
HistoryOct 10, 2023 - 1:55 a.m.

Information Disclosure

2023-10-1001:55:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
mediawiki
information disclosure
vulnerability
code injection
data theft
software

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

13.5%

mediawiki is vulnerable to Information Disclosure. The vulnerability allows an attacker to inject arbitrary code into a web page, potentially allowing them to steal user data.

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0004 Low

EPSS

Percentile

13.5%