CVE-2004-2152: XSS
Published Dec 31, 2004
·Updated
Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.
Affected Software
13 affected components
MediaWiki MediaWiki=1.2.4
MediaWiki MediaWiki=1.2.1
MediaWiki MediaWiki=1.2.2
MediaWiki MediaWiki=1.2.5
MediaWiki MediaWiki=1.3.4
MediaWiki MediaWiki=1.2.6
MediaWiki MediaWiki=1.3.0
MediaWiki MediaWiki=1.1.0
MediaWiki MediaWiki=1.3.3
MediaWiki MediaWiki=1.2.3
MediaWiki MediaWiki=1.3.1
MediaWiki MediaWiki=1.2.0
MediaWiki MediaWiki=1.3.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Jul 1, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2152?
CVE-2004-2152 is classified as a high severity vulnerability due to the potential for remote code execution through XSS.
2
How do I fix CVE-2004-2152?
To fix CVE-2004-2152, upgrade to MediaWiki version 1.4.0 or later, which addresses this vulnerability.
3
What software versions are affected by CVE-2004-2152?
CVE-2004-2152 affects MediaWiki versions 1.2.0 through 1.3.4.
4
Can CVE-2004-2152 allow for data theft?
Yes, CVE-2004-2152 can allow attackers to execute arbitrary scripts that could lead to data theft.
5
Is CVE-2004-2152 a common vulnerability in web applications?
CVE-2004-2152 is a common type of vulnerability known as cross-site scripting (XSS), which is prevalent in many web applications.