CVE-2013-1951

State: PUBLISHED · Published: 2019-10-31 · Updated: 2024-08-06 · Assigner: redhat

Description

A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.

CWE

(none)

Affected

ikimedia Foundation / MediaWiki — v=before 1.19.5 and 1.20.x before 1.20.4 [affected]

CVSS

(none)

References

https://security-tracker.debian.org/tracker/CVE-2013-1951 x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1951 x_refsource_MISC
http://security.gentoo.org/glsa/glsa-201310-21.xml x_refsource_MISC
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-1951 x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104022.html x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104027.html x_refsource_MISC
http://www.openwall.com/lists/oss-security/2013/04/16/12 x_refsource_MISC
http://www.securityfocus.com/bid/59077 x_refsource_MISC
https://phabricator.wikimedia.org/T48084 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2013/1xxx/CVE-2013-1951.json