Debian/mediawiki: medium 6.1
An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in
Action: Upgrade mediawiki to 1:1.35.6-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.35.6-1 | - |
Fixed versions
| 1:1.35.6-1 |
Sources
- osv: DEBIAN-CVE-2022-28202#Debian:13/mediawiki
- https://security-tracker.debian.org/tracker/CVE-2022-28202
published · modified · JSON