exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Debian Security Advisory 3046-1

Posted Oct 6, 2014

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3046-1 - It was reported that MediaWiki, a website engine for collaborative work, allowed to load user-created CSS on pages where user-created JavaScript is not allowed. A wiki user could be tricked into performing actions by manipulating the interface from CSS, or JavaScript code being executed from CSS, on security-wise sensitive pages like Special:Preferences and Special:UserLogin. This update removes the separation of CSS and JavaScript module allowance.

tags | advisory, javascript

systems | linux, debian

advisories | CVE-2014-7295

SHA-256 | a8c028bd8f5b773c2db161c0427d597f71d4ffad2009685a807ddd29f797ca7b

Download | Favorite | View

Related Files

No related files