Description

MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.

Remediation

References

CVE-2013-6453

Related Vulnerabilities

CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4903)

XWiki Cleartext Storage of Sensitive Information Vulnerability (CVE-2023-50719)

Oracle Database Server CVE-2010-0870 Vulnerability (CVE-2010-0870)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.4)

Oracle Application Server CVE-2006-0284 Vulnerability (CVE-2006-0284)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2013-6453