← volver
CVE-2012-4379

CVE-2012-4379

EPSS 1.4%
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via an embedded API response in an IFRAME element.
Productos afectados
n/a · n/a

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686330https://bugzilla.redhat.com/show_bug.cgi?id=853426https://lists.wikimedia.org/pipermail/mediawiki-announce/2012-August/000119.htmlhttps://phabricator.wikimedia.org/T41180http://www.openwall.com/lists/oss-security/2012/08/31/10http://www.openwall.com/lists/oss-security/2012/08/31/6