Advisories » MGASA-2014-0253

Updated mediawiki packages fix security vulnerability

Publication date: 06 Jun 2014
Modification date: 09 Jul 2015
Type: security
Affected Mageia releases : 3 , 4
CVE: CVE-2014-3966

Description

XSS vulnerability in MediaWiki before 1.22.7, due to usernames on
Special:PasswordReset being parsed as wikitext. The username on
Special:PasswordReset can be supplied by anyone and will be parsed
with wgRawHtml enabled. Since Special:PasswordReset is whitelisted
by default on private wikis, this could potentially lead to an XSS
crossing a privilege boundary (CVE-2014-3966).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=13477
• https://bugzilla.wikimedia.org/show_bug.cgi?id=65501
• http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-May/000151.html
• http://openwall.com/lists/oss-security/2014/06/04/15
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3966

SRPMS

3/core

• mediawiki-1.22.7-1.mga3

4/core

• mediawiki-1.22.7-1.mga4