CVE-2014-5243

Fixed in a distro release EPSS 2%

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Published 2014-08-22 · CVE record · OSV

Products: mediawiki

Distro releases