tocsin

Debian/mediawiki: unknown

The wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through 1.22.x before 1.22.14, and 1.23.x before 1.23.7 allows remote attackers to conduct PHP object injectio

Action: Upgrade mediawiki to 1:1.19.20+dfsg-2.1 or later.

Affected

introducedfixedlast affected
01:1.19.20+dfsg-2.1-

Fixed versions

1:1.19.20+dfsg-2.1

Sources

published · modified · JSON