CVE-2005-0534: XSS
Published Feb 24, 2005
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script.
Affected Software
17 affected components
MediaWiki MediaWiki=1.3.5
MediaWiki MediaWiki=1.3.6
MediaWiki MediaWiki=1.4_beta6
MediaWiki MediaWiki=1.4_beta3
MediaWiki MediaWiki=1.3.10
MediaWiki MediaWiki=1.3.4
MediaWiki MediaWiki=1.3.9
MediaWiki MediaWiki=1.4_beta4
MediaWiki MediaWiki=1.3.0
MediaWiki MediaWiki=1.4_beta1
MediaWiki MediaWiki=1.3.3
MediaWiki MediaWiki=1.3.1
MediaWiki MediaWiki=1.3.7
MediaWiki MediaWiki=1.3.8
MediaWiki MediaWiki=1.3.2
MediaWiki MediaWiki=1.4_beta2
MediaWiki MediaWiki=1.4_beta5
Remediation
Patch Available
Patch Available
Patch Available
Event History
Feb 24, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0534?
CVE-2005-0534 is classified as a medium severity vulnerability due to the cross-site scripting risks it poses.
2
How do I fix CVE-2005-0534?
To fix CVE-2005-0534, upgrade your MediaWiki installation to version 1.3.11 or later, or 1.4 rc1 or later.
3
What versions of MediaWiki are affected by CVE-2005-0534?
CVE-2005-0534 affects MediaWiki versions 1.3.0 through 1.3.10 and 1.4 beta prior to 1.4 rc1.
4
What type of vulnerability is CVE-2005-0534?
CVE-2005-0534 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts.
5
Who can be affected by CVE-2005-0534?
Users of vulnerable MediaWiki versions can be affected, as attackers may exploit these vulnerabilities to execute unwanted actions on behalf of the user.