VDB
CVE-2014-5243
CVE-2014-5243
PUBLISHED
CVSS 4.300000190734863 MEDIUM
MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
EPSS 0.37% · 59.0th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
0.37%
59.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| mediawiki | mediawiki | 0, 1.19, 1.19 |
Timeline
- Aug 22, 2014 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 17, 2022 CVE Updated
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- [MediaWiki-announce] 20140730 MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2 mailing-list
- DSA-3011 vendor-advisory
- MDVSA-2014:153 vendor-advisory
- 59738 third-party-advisory
- [oss-security] 20140814 Re: Possible CVE Request: MediaWiki Security and Maintenance Releases: 1.19.18, 1.22.9 and 1.23.2 mailing-list
- https://bugzilla.wikimedia.org/show_bug.cgi?id=65778 url
- http://advisories.mageia.org/MGASA-2014-0309.html url
- https://nvd.nist.gov/vuln/detail/CVE-2014-5243 advisory