Summary
It was discovered that MediaWiki, a wiki engine, did not sufficiently filter CSS in uploaded SVG files, allowing for cross site scripting.
Solution
For the stable distribution (wheezy), this problem has been fixed in version 1:1.19.19+dfsg-0+deb7u1.
For the unstable distribution (sid), this problem has been fixed in version 1:1.19.19+dfsg-1.
We recommend that you upgrade your mediawiki packages.
Insight
MediaWiki is a wiki engine (a program for creating a collaboratively edited website). It is designed to handle heavy websites containing library-like document collections, and supports user uploads of images/sounds, multilingual content, TOC autogeneration, ISBN links, etc.
Affected
mediawiki on Debian Linux
Detection
This check tests the installed software version using the apt package manager.
References
Updated on 2015-03-25
