CVE-2014-2853
1 advisory.
Packagist/mediawiki/core CVE-2014-2853: medium, EPSS 2.39%
Cross-site scripting vulnerability in includes/actions/InfoAction.php
Action: Upgrade mediawiki/core to 1.21.9 or later.
composer require mediawiki/core:1.21.9composer require mediawiki/core:1.22.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.21.9 | - |
| 1.22.0 | 1.22.6 | - |
Fixed versions
| 1.21.9 | 1.22.6 |
Sources
- osv: GHSA-6h86-9r5g-f2h5
- https://nvd.nist.gov/vuln/detail/CVE-2014-2853
- https://github.com/wikimedia/mediawiki-core/commit/0b695ae09aada343ab59be4a3c9963995a1143b6
- https://bugzilla.redhat.com/show_bug.cgi?id=1091967
- https://bugzilla.wikimedia.org/show_bug.cgi?id=63251
- https://github.com/wikimedia/mediawiki
- https://www.mediawiki.org/wiki/Release_notes/1.21#Changes_since_1.21.8
- https://www.mediawiki.org/wiki/Release_notes/1.22#Changes_since_1.22.5
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-April/000149.html
- http://secunia.com/advisories/58262
- http://www.securityfocus.com/bid/67068
- http://www.securitytracker.com/id/1030161
CVE-2014-2853 · published · modified · JSON