Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-2934
4.3
MEDIUMCVSS v2
Published
April 13, 2015
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xml_parse function does not expand entities, which allows remote attackers to inject arbitrary web script or HTML via a crafted SVG file.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.23.0, = 1.21.11, = 1.22.8, = 1.20.5, = 1.23.4, = 1.20.1, = 1.22.10, = 1.22.6, = 1.22.13, <= 1.19.23, = 1.21.6, = 1.23.3, = 1.20.2, = 1.21.1, = 1.21.8, = 1.22.5, = 1.23.6, = 1.21.5, = 1.22.0, = 1.22.9, = 1.23.1, = 1.24.0, = 1.24.1, = 1.20.4, = 1.22.7, = 1.22.15, = 1.23.7, = 1.20.7, = 1.20.8, = 1.21.7, = 1.22.2, = 1.22.3, = 1.22.4, = 1.22.11, = 1.22.12, = 1.20, = 1.21, = 1.21.9, = 1.22.14, = 1.23.5, = 1.20.6, = 1.21.4, = 1.22.1, = 1.23.2, = 1.20.3, = 1.21.2, = 1.21.3, = 1.21.10, = 1.23.8NVD
mediawiki
NPMA JavaScript framework for the MediaWiki API.
NPMA JavaScript framework for the MediaWiki API.= 1.23.0, = 1.21.11, = 1.22.8, = 1.20.5, = 1.23.4, = 1.20.1, = 1.22.10, = 1.22.6, = 1.22.13, <= 1.19.23, = 1.21.6, = 1.23.3, = 1.20.2, = 1.21.1, = 1.21.8, = 1.22.5, = 1.23.6, = 1.21.5, = 1.22.0, = 1.22.9, = 1.23.1, = 1.24.0, = 1.24.1, = 1.20.4, = 1.22.7, = 1.22.15, = 1.23.7, = 1.20.7, = 1.20.8, = 1.21.7, = 1.22.2, = 1.22.3, = 1.22.4, = 1.22.11, = 1.22.12, = 1.20, = 1.21, = 1.21.9, = 1.22.14, = 1.23.5, = 1.20.6, = 1.21.4, = 1.22.1, = 1.23.2, = 1.20.3, = 1.21.2, = 1.21.3, = 1.21.10, = 1.23.8
