CVE-2014-5243: Input Validation
Published Aug 22, 2014
·Updated
MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Affected Software
50 affected components
MediaWiki MediaWiki<=1.19.17
MediaWiki MediaWiki=1.19
MediaWiki MediaWiki=1.19-beta_1
MediaWiki MediaWiki=1.19-beta_2
MediaWiki MediaWiki=1.19.0
MediaWiki MediaWiki=1.19.1
MediaWiki MediaWiki=1.19.2
MediaWiki MediaWiki=1.19.3
MediaWiki MediaWiki=1.19.4
MediaWiki MediaWiki=1.19.5
MediaWiki MediaWiki=1.19.6
MediaWiki MediaWiki=1.19.7
MediaWiki MediaWiki=1.19.8
MediaWiki MediaWiki=1.19.9
MediaWiki MediaWiki=1.19.10
MediaWiki MediaWiki=1.19.11
MediaWiki MediaWiki=1.19.12
MediaWiki MediaWiki=1.19.13
MediaWiki MediaWiki=1.19.14
MediaWiki MediaWiki=1.19.15
MediaWiki MediaWiki=1.19.16
MediaWiki MediaWiki=1.20.1
MediaWiki MediaWiki=1.20.2
MediaWiki MediaWiki=1.20.3
MediaWiki MediaWiki=1.20.4
MediaWiki MediaWiki=1.20.5
MediaWiki MediaWiki=1.20.6
MediaWiki MediaWiki=1.20.7
MediaWiki MediaWiki=1.20.8
MediaWiki MediaWiki=1.21.1
MediaWiki MediaWiki=1.21.2
MediaWiki MediaWiki=1.21.3
MediaWiki MediaWiki=1.21.4
MediaWiki MediaWiki=1.21.5
MediaWiki MediaWiki=1.21.6
MediaWiki MediaWiki=1.21.7
MediaWiki MediaWiki=1.21.8
MediaWiki MediaWiki=1.21.9
MediaWiki MediaWiki=1.21.10
MediaWiki MediaWiki=1.22.0
MediaWiki MediaWiki=1.22.1
MediaWiki MediaWiki=1.22.2
MediaWiki MediaWiki=1.22.3
MediaWiki MediaWiki=1.22.4
MediaWiki MediaWiki=1.22.5
MediaWiki MediaWiki=1.22.6
MediaWiki MediaWiki=1.22.7
MediaWiki MediaWiki=1.22.8
MediaWiki MediaWiki=1.23.0
MediaWiki MediaWiki=1.23.1
Remediation
Patch Available
Event History
Aug 22, 2014
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5243?
CVE-2014-5243 has a medium severity level due to its potential to allow clickjacking attacks.
2
How do I fix CVE-2014-5243?
To fix CVE-2014-5243, update MediaWiki to version 1.19.18, 1.22.9, or 1.23.2 or later.
3
What are the affected versions for CVE-2014-5243?
CVE-2014-5243 affects MediaWiki versions prior to 1.19.18, 1.22.9, and 1.23.2.
4
What types of attacks does CVE-2014-5243 enable?
CVE-2014-5243 enables remote attackers to conduct clickjacking attacks.
5
Which applications are vulnerable to CVE-2014-5243?
MediaWiki versions 1.19.x, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 are vulnerable to CVE-2014-5243.