Description

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."

Remediation

References

CVE-2010-1189

Related Vulnerabilities

Tornado URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-28370)

IBM RTC Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-29844)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor 'key' Parameter Security Bypass (1.1.24)

WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Cross-Site Scripting (2.0.12)

Oracle Application Server Other Vulnerability (CVE-2004-1362)

Severity

Medium

Classification

CVE-2010-1189 CWE-20

Tags

Missing Update Known Vulnerabilities