Description

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."

Remediation

References

CVE-2010-1189

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-28979)

Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)

Oracle Database Server CVE-2014-0377 Vulnerability (CVE-2014-0377)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2231)

WordPress Plugin Stockdio Historical Chart Cross-Site Scripting (2.7.2)

Severity

Medium

Classification

CVE-2010-1189 CWE-20

Tags

Missing Update Known Vulnerabilities