CVE-2013-6451
Published: 28 January 2020
Cross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via unspecified CSS values.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
mediawiki Launchpad, Ubuntu, Debian |
precise |
Ignored
(end of life)
|
| trusty |
Does not exist
(trusty was not-affected [1:1.19.14+dfsg-1])
|
|
| upstream |
Released
(1:1.19.10+dfsg-1)
|
|
| vivid |
Not vulnerable
|
|
| wily |
Not vulnerable
|
|
| xenial |
Does not exist
|
|
| yakkety |
Not vulnerable
|
|
| zesty |
Not vulnerable
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 6.1 |
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | Required |
| Scope | Changed |
| Confidentiality | Low |
| Integrity impact | Low |
| Availability impact | None |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |