CVE-2013-4568: XSS
Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain non-ASCII characters in CSS, as demonstrated using variations of "expression" containing (1) full width characters or (2) IPA extensions, which are converted and rendered by Internet Explorer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4568?
CVE-2013-4568 has a medium severity rating due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2013-4568?
To fix CVE-2013-4568, upgrade your MediaWiki installation to version 1.19.9, 1.20.8, or 1.21.3 or later.
Which versions of MediaWiki are affected by CVE-2013-4568?
CVE-2013-4568 affects MediaWiki versions before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3.
What types of attacks can CVE-2013-4568 facilitate?
CVE-2013-4568 can facilitate cross-site scripting (XSS) attacks, allowing attackers to execute malicious scripts in users' browsers.
Is CVE-2013-4568 related to CSS vulnerabilities?
Yes, CVE-2013-4568 is specifically related to an incomplete blacklist vulnerability in CSS processing.