CVE-2013-4574: XSS
First published: Mon May 12 2014(Updated: )
Cross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to videos.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MediaWiki | <=1.19.9 | |
| MediaWiki | =1.19 | |
| MediaWiki | =1.19-beta_1 | |
| MediaWiki | =1.19-beta_2 | |
| MediaWiki | =1.19.0 | |
| MediaWiki | =1.19.1 | |
| MediaWiki | =1.19.2 | |
| MediaWiki | =1.19.3 | |
| MediaWiki | =1.19.4 | |
| MediaWiki | =1.19.5 | |
| MediaWiki | =1.19.6 | |
| MediaWiki | =1.19.7 | |
| MediaWiki | =1.19.8 | |
| MediaWiki | =1.22.0 | |
| MediaWiki | =1.21 | |
| MediaWiki | =1.21.1 | |
| MediaWiki | =1.21.2 | |
| MediaWiki | =1.21.3 | |
| <=1.19.9 | ||
| =1.19 | ||
| =1.19-beta_1 | ||
| =1.19-beta_2 | ||
| =1.19.0 | ||
| =1.19.1 | ||
| =1.19.2 | ||
| =1.19.3 | ||
| =1.19.4 | ||
| =1.19.5 | ||
| =1.19.6 | ||
| =1.19.7 | ||
| =1.19.8 | ||
| =1.22.0 | ||
| =1.21 | ||
| =1.21.1 | ||
| =1.21.2 | ||
| =1.21.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2013-4574?
CVE-2013-4574 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-4574?
To mitigate CVE-2013-4574, upgrade the MediaWiki installation to version 1.19.10 or higher, 1.21.4 or higher, or 1.22.1 or higher.
Which versions of MediaWiki are affected by CVE-2013-4574?
CVE-2013-4574 affects MediaWiki versions before 1.19.10, 1.21.4, and 1.22.1.
What type of vulnerability is CVE-2013-4574?
CVE-2013-4574 is a cross-site scripting (XSS) vulnerability.
Can attackers exploit CVE-2013-4574 remotely?
Yes, attackers can exploit CVE-2013-4574 remotely by injecting arbitrary web scripts or HTML.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/weakness
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/event
- vendor/mediawiki
- canonical/mediawiki
- version/mediawiki/1.19.9
- version/mediawiki/1.19
- version/mediawiki/1.19-beta_1
- version/mediawiki/1.19-beta_2
- version/mediawiki/1.19.0
- version/mediawiki/1.19.1
- version/mediawiki/1.19.2
- version/mediawiki/1.19.3
- version/mediawiki/1.19.4
- version/mediawiki/1.19.5
- version/mediawiki/1.19.6
- version/mediawiki/1.19.7
- version/mediawiki/1.19.8
- version/mediawiki/1.22.0
- version/mediawiki/1.21
- version/mediawiki/1.21.1
- version/mediawiki/1.21.2
- version/mediawiki/1.21.3