CVE-2013-1951

CVE-2013-1951: vulnerability in ikimedia Foundation MediaWiki

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
exploitation probability
1.6%top 24% of all CVEs
observed exploitation
nono source reports it
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.
Affected products
ikimedia Foundation · MediaWiki
References
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104022.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-April/104027.htmlhttps://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-1951https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1951http://security.gentoo.org/glsa/glsa-201310-21.xmlhttps://phabricator.wikimedia.org/T48084https://security-tracker.debian.org/tracker/CVE-2013-1951http://www.openwall.com/lists/oss-security/2013/04/16/12http://www.securityfocus.com/bid/59077