Lucene search
Veracode Vulnerability DatabaseVERACODE:29949HistoryApr 10, 2021 - 4:45 a.m.
Cross-Site Scripting (XSS)
2021-04-1004:45:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.005 Low
EPSS
Percentile
77.2%
mediawiki is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute arbitrary Javascript in a user’s browser via the label messages ChangesList special pages such as Special:RecentChanges and Special:Watchlist.
References
lists.fedoraproject.org/archives/list/[email protected]/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/
lists.fedoraproject.org/archives/list/[email protected]/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/
phabricator.wikimedia.org/T278058
security-tracker.debian.org/tracker/CVE-2021-30157
security.gentoo.org/glsa/202107-40
www.debian.org/security/2021/dsa-4889
Related
osv
osv
CVE-2021-30157
2021-04-06 07:15:12
BIT-mediawiki-2021-30157
2024-03-06 11:12:39
mediawiki - security update
2021-04-10 00:00:00
cve
cve
CVE-2021-30157
2021-04-06 07:15:12
nvd
nvd
CVE-2021-30157
2021-04-06 07:15:12
ubuntucve
ubuntucve
CVE-2021-30157
2021-04-06 00:00:00
redhatcve
redhatcve
CVE-2021-30157
2021-04-06 17:47:56
prion
prion
Cross site scripting
2021-04-06 07:15:00
debiancve
debiancve
CVE-2021-30157
2021-04-06 07:15:12
cvelist
cvelist
CVE-2021-30157
2021-04-06 06:43:05
openvas
openvas
MediaWiki < 1.31.12, 1.32 < 1.35.2 Multiple Vulnerabilities - Windows
2021-04-07 00:00:00
MediaWiki < 1.31.12, 1.32 < 1.35.2 Multiple Vulnerabilities - Linux
2021-04-07 00:00:00
Fedora: Security Advisory for mediawiki (FEDORA-2021-f4223b6684)
2021-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: mediawiki-1.35.2-1.fc34
2021-04-24 20:24:48
[SECURITY] Fedora 33 Update: mediawiki-1.35.2-1.fc33
2021-04-21 21:41:50
nessus
nessus
Debian DSA-4889-1 : mediawiki - security update
2021-04-12 00:00:00
GLSA-202107-40 : MediaWiki: Multiple vulnerabilities
2022-01-24 00:00:00
debian
debian
[SECURITY] [DSA 4889-1] mediawiki security update
2021-04-10 15:46:54
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2021-07-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package mediawiki version 1.35.2-alt1
2021-04-24 00:00:00