CVE-2013-6453: Input Validation
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6453?
CVE-2013-6453 has not been assigned a specific CVSS score, but it is considered a significant vulnerability due to improper sanitization of SVG files.
How do I fix CVE-2013-6453?
To fix CVE-2013-6453, upgrade MediaWiki to version 1.22.1 or later, or to versions 1.19.10 or 1.21.4.
What systems are affected by CVE-2013-6453?
CVE-2013-6453 affects MediaWiki versions prior to 1.19.10, 1.21.4, and 1.22.1.
Can CVE-2013-6453 lead to remote code execution?
CVE-2013-6453 does not explicitly indicate remote code execution, but the improper handling of SVG files can lead to unspecified impacts.
Is there a workaround for CVE-2013-6453?
There are no known workarounds for CVE-2013-6453 other than upgrading to a patched version of MediaWiki.