MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 01:13
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html - | |
| References | () http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-March/000088.html - Patch, Vendor Advisory | |
| References | () http://secunia.com/advisories/39022 - Vendor Advisory | |
| References | () http://secunia.com/advisories/39656 - | |
| References | () http://www.debian.org/security/2010/dsa-2022 - | |
| References | () http://www.vupen.com/english/advisories/2010/0685 - Vendor Advisory | |
| References | () http://www.vupen.com/english/advisories/2010/1001 - | 
Information
                Published : 2010-03-31 18:00
Updated : 2025-04-11 00:51
NVD link : CVE-2010-1189
Mitre link : CVE-2010-1189
CVE.ORG link : CVE-2010-1189
JSON object : View
Products Affected
                mediawiki
- mediawiki
CWE
                
                    
                        
                        CWE-20
                        
            Improper Input Validation
