tocsin

Debian/mediawiki: unknown

The checkCss function in includes/Sanitizer.php in the wikitext parser in MediaWiki before 1.16.3 does not properly validate Cascading Style Sheets (CSS) token sequences, which allows remote attackers

Action: Upgrade mediawiki to 1:1.15.5-5 or later.

Affected

introducedfixedlast affected
01:1.15.5-5-

Fixed versions

1:1.15.5-5

Sources

published · modified · JSON