CVE-2013-4574: XSS
Published May 12, 2014
·Updated
Cross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to videos.
Affected Software
18 affected components
MediaWiki MediaWiki<=1.19.9
MediaWiki MediaWiki=1.19
MediaWiki MediaWiki=1.19-beta_1
MediaWiki MediaWiki=1.19-beta_2
MediaWiki MediaWiki=1.19.0
MediaWiki MediaWiki=1.19.1
MediaWiki MediaWiki=1.19.2
MediaWiki MediaWiki=1.19.3
MediaWiki MediaWiki=1.19.4
MediaWiki MediaWiki=1.19.5
MediaWiki MediaWiki=1.19.6
MediaWiki MediaWiki=1.19.7
MediaWiki MediaWiki=1.19.8
MediaWiki MediaWiki=1.22.0
MediaWiki MediaWiki=1.21
MediaWiki MediaWiki=1.21.1
MediaWiki MediaWiki=1.21.2
MediaWiki MediaWiki=1.21.3
Remediation
Event History
May 12, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4574?
CVE-2013-4574 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-4574?
To mitigate CVE-2013-4574, upgrade the MediaWiki installation to version 1.19.10 or higher, 1.21.4 or higher, or 1.22.1 or higher.
3
Which versions of MediaWiki are affected by CVE-2013-4574?
CVE-2013-4574 affects MediaWiki versions before 1.19.10, 1.21.4, and 1.22.1.
4
What type of vulnerability is CVE-2013-4574?
CVE-2013-4574 is a cross-site scripting (XSS) vulnerability.
5
Can attackers exploit CVE-2013-4574 remotely?
Yes, attackers can exploit CVE-2013-4574 remotely by injecting arbitrary web scripts or HTML.