cvelistv5 - cve-2011-1578

CVE-2011-1578 (GCVE-0-2011-1578)

Vulnerability from cvelistv5

Published

2011-04-27 00:00

Modified

2024-08-06 22:28

Severity ?

CWE

Summary

Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.

References

URL

Tags

	https://exchange.xforce.ibmcloud.com/vulnerabilities/66737	vdb-entry, x_refsource_XF
	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html	vendor-advisory, x_refsource_FEDORA
	http://www.vupen.com/english/advisories/2011/0978	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/bid/47354	vdb-entry, x_refsource_BID
	http://secunia.com/advisories/44142	third-party-advisory, x_refsource_SECUNIA
	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html	vendor-advisory, x_refsource_FEDORA
	http://www.vupen.com/english/advisories/2011/1151	vdb-entry, x_refsource_VUPEN
	http://www.debian.org/security/2011/dsa-2366	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=696360	x_refsource_CONFIRM
	http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html	mailing-list, x_refsource_MLIST
	http://www.vupen.com/english/advisories/2011/1100	vdb-entry, x_refsource_VUPEN
	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=695577	x_refsource_CONFIRM
	http://openwall.com/lists/oss-security/2011/04/13/15	mailing-list, x_refsource_MLIST
	https://bugzilla.wikimedia.org/show_bug.cgi?id=28235	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.929Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "mediawiki-file-extensions-xss(66737)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66737"
          },
          {
            "name": "FEDORA-2011-5495",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html"
          },
          {
            "name": "ADV-2011-0978",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0978"
          },
          {
            "name": "FEDORA-2011-5807",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html"
          },
          {
            "name": "47354",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/47354"
          },
          {
            "name": "44142",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44142"
          },
          {
            "name": "FEDORA-2011-5848",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html"
          },
          {
            "name": "ADV-2011-1151",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/1151"
          },
          {
            "name": "DSA-2366",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2366"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=696360"
          },
          {
            "name": "[mediawiki-announce] 20110412 MediaWiki security release 1.16.3",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html"
          },
          {
            "name": "ADV-2011-1100",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/1100"
          },
          {
            "name": "FEDORA-2011-5812",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695577"
          },
          {
            "name": "[oss-security] 20110413 Re: CVE request: mediawiki 1.16.3",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/04/13/15"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=28235"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "mediawiki-file-extensions-xss(66737)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66737"
        },
        {
          "name": "FEDORA-2011-5495",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html"
        },
        {
          "name": "ADV-2011-0978",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0978"
        },
        {
          "name": "FEDORA-2011-5807",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059235.html"
        },
        {
          "name": "47354",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/47354"
        },
        {
          "name": "44142",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44142"
        },
        {
          "name": "FEDORA-2011-5848",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html"
        },
        {
          "name": "ADV-2011-1151",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/1151"
        },
        {
          "name": "DSA-2366",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2366"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=696360"
        },
        {
          "name": "[mediawiki-announce] 20110412 MediaWiki security release 1.16.3",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html"
        },
        {
          "name": "ADV-2011-1100",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/1100"
        },
        {
          "name": "FEDORA-2011-5812",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=695577"
        },
        {
          "name": "[oss-security] 20110413 Re: CVE request: mediawiki 1.16.3",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/04/13/15"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.wikimedia.org/show_bug.cgi?id=28235"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1578",
    "datePublished": "2011-04-27T00:00:00.000Z",
    "dateReserved": "2011-04-05T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:28:41.929Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2011-AVI-261

Vulnerability from certfr_avis

Plusieurs vulnérabilités ont été corrigés avec la version 1.16.3 de MediaWiki. Deux d'entre-elles permettent de réaliser de l'injection de code indirecte à distance.

Description

Trois vulnérabilités ont été corrigées :

certains paramètres passés dans l'ajout de commentaires ne sont pas correctement validés, permettant à un attaquant de réaliser de l'injection de code indirecte (CVE-2011-1579) ;
une fonction d'import ne vérifie pas correctement les permissions, autorisant une personne malveillante d'importer indument des ressources (CVE-2011-1580) ;
il est possible de tromper certains navigateurs, comme Internet Explorer 6, et de leur faire interpréter certains fichiers comme du HTML, permettant à une personne malveillante de réaliser de l'injection de code indirecte (CVE-2011-1578).

Cette dernière vulnérabilité n'ayant pas été totalement corrigée avec la version 1.16.3 de MediaWiki, un nouveau correctif est disponible avec la version 1.16.4.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

MediaWiki versions antérieures à 1.16.4.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de mise à jour MediaWiki 1.16.4 du 14 avril 2011	None	vendor-advisory
Bulletin de mise à jour MediaWiki versions 1.16.3 du 12 avril 2011	None	vendor-advisory
Bulletin de mise à jour MediaWiki versions 1.16.3 du 12 avril 2011 :	-	other
Bulletin de mise à jour MediaWiki versions 1.16.4 du 14 avril 2011 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eMediaWiki versions ant\u00e9rieures \u00e0 1.16.4.\u003c/P\u003e",
  "content": "## Description\n\nTrois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es :\n\n-   certains param\u00e8tres pass\u00e9s dans l\u0027ajout de commentaires ne sont pas\n    correctement valid\u00e9s, permettant \u00e0 un attaquant de r\u00e9aliser de\n    l\u0027injection de code indirecte (CVE-2011-1579) ;\n-   une fonction d\u0027import ne v\u00e9rifie pas correctement les permissions,\n    autorisant une personne malveillante d\u0027importer indument des\n    ressources (CVE-2011-1580) ;\n-   il est possible de tromper certains navigateurs, comme Internet\n    Explorer 6, et de leur faire interpr\u00e9ter certains fichiers comme du\n    HTML, permettant \u00e0 une personne malveillante de r\u00e9aliser de\n    l\u0027injection de code indirecte (CVE-2011-1578).\n\nCette derni\u00e8re vuln\u00e9rabilit\u00e9 n\u0027ayant pas \u00e9t\u00e9 totalement corrig\u00e9e avec la\nversion 1.16.3 de MediaWiki, un nouveau correctif est disponible avec la\nversion 1.16.4.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-1579",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1579"
    },
    {
      "name": "CVE-2011-1580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1580"
    },
    {
      "name": "CVE-2011-1578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1578"
    }
  ],
  "initial_release_date": "2011-04-28T00:00:00",
  "last_revision_date": "2011-04-28T00:00:00",
  "links": [
    {
      "title": "Bulletin de mise \u00e0 jour MediaWiki versions 1.16.3 du 12    avril 2011 :",
      "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000096.html"
    },
    {
      "title": "Bulletin de mise \u00e0 jour MediaWiki versions 1.16.4 du 14    avril 2011 :",
      "url": "http://lists.wikimedia.org/pipermail/mediawiki-announce/2011-April/000097.html"
    }
  ],
  "reference": "CERTA-2011-AVI-261",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-04-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9s avec la version 1.16.3 de\nMediaWiki. Deux d\u0027entre-elles permettent de r\u00e9aliser de l\u0027injection de\ncode indirecte \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans MediaWiki",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de mise \u00e0 jour MediaWiki 1.16.4 du 14 avril 2011",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de mise \u00e0 jour MediaWiki versions 1.16.3 du 12 avril 2011",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2011-1578 (GCVE-0-2011-1578)

Vulnerability from cvelistv5

CERTA-2011-AVI-261

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature