REDHAT-BUG-620225: XSS
MediaWiki upstream has released: [1] http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html
v1.16.0 and v.1.15.5 versions of MediaWiki, addressing the following XSS flaw (from [1]):
A cross-site scripting (XSS) vulnerability was discovered in profileinfo.php. The vulnerability is only exposed when the script is explicitly enabled in LocalSettings.php, with $wgEnableProfileInfo = true.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-620225?
The severity of REDHAT-BUG-620225 is classified as a moderate security risk due to the XSS vulnerability present in affected versions.
How do I fix REDHAT-BUG-620225?
To fix REDHAT-BUG-620225, upgrade to MediaWiki version 1.16.0 or 1.15.5 as recommended by the upstream release.
Which versions of MediaWiki are affected by REDHAT-BUG-620225?
MediaWiki versions 1.15.5 and 1.16.0 are affected by REDHAT-BUG-620225, containing the XSS vulnerability.
What type of vulnerability is discussed in REDHAT-BUG-620225?
REDHAT-BUG-620225 discusses an XSS (Cross-Site Scripting) vulnerability that can be exploited in MediaWiki.
Is there a workaround for REDHAT-BUG-620225?
There is no official workaround for REDHAT-BUG-620225; the recommended action is to update to the patched versions.