CVE-2008-5249: XSS
Published Dec 19, 2008
·Updated
Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
3 affected components
MediaWiki MediaWiki=1.13.0
MediaWiki MediaWiki=1.13.1
MediaWiki MediaWiki=1.13.2
Remediation
Event History
Dec 19, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5249?
CVE-2008-5249 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-5249?
To fix CVE-2008-5249, upgrade to MediaWiki version 1.13.3 or later, which contains the necessary security patches.
3
What types of attacks are possible with CVE-2008-5249?
CVE-2008-5249 allows attackers to perform cross-site scripting attacks, which can lead to data theft or unauthorized actions on behalf of users.
4
Which versions of MediaWiki are affected by CVE-2008-5249?
MediaWiki versions 1.13.0, 1.13.1, and 1.13.2 are affected by CVE-2008-5249.
5
Is CVE-2008-5249 related to user input?
Yes, CVE-2008-5249 is related to inadequate validation of user input, allowing attackers to inject malicious scripts.