CVE-2014-5243
- State
- Published
- Severity
- Not scored
- Published
- Aug 22, 2014
- Updated
- Aug 6, 2024
- Reserved
- Aug 14, 2014
Description
MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [MediaWiki-announce] 20140730 MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2mailing-list
- DSA-3011vendor-advisory
- MDVSA-2014:153vendor-advisory
- 59738third-party-advisory
- [oss-security] 20140814 Re: Possible CVE Request: MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2mailing-list
- https://bugzilla.wikimedia.org/show_bug.cgi?id=65778
- http://advisories.mageia.org/MGASA-2014-0309.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.