ubuntu · CVE-2012-6453

Quick triage

Priority: medium Published: 2012-12-31 11:50:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-6453 medium priority: Ubuntu including 1 source packages (mediawiki-extensions), 15 status rows across 15 suites (hardy, lucid, oneiric, precise, quantal, raring, saucy, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): ignored 5, not-affected 5, DNE 4, released 1.

Description:

Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a crafted feed.

cvelogic Threat Intelligence