ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2017.0110
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2017-0110)
Resumen:	The remote host is missing an update for the 'mediawiki' package(s) announced via the MGASA-2017-0110 advisory.
Descripción:	Summary: The remote host is missing an update for the 'mediawiki' package(s) announced via the MGASA-2017-0110 advisory. Vulnerability Insight: API parameters may now be marked as 'sensitive' to keep their values out of the logs (CVE-2017-0361). 'Mark all pages visited' on the watchlist now requires a CSRF token (CVE-2017-0362). Special:UserLogin and Special:Search allow redirect to interwiki links (CVE-2017-0363, CVE-2017-0364). XSS in SearchHighlighter::highlightText() when $wgAdvancedSearchHighlighting is true (CVE-2017-0365). SVG filter evasion using default attribute values in DTD declaration (CVE-2017-0366). Escape content model/format url parameter in message (CVE-2017-0368). Sysops can undelete pages, although the page is protected against it (CVE-2017-0369). Spam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter (CVE-2017-0370). Affected Software/OS: 'mediawiki' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-0361 https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html http://www.securitytracker.com/id/1039812 Common Vulnerability Exposure (CVE) ID: CVE-2017-0362 Common Vulnerability Exposure (CVE) ID: CVE-2017-0363 Common Vulnerability Exposure (CVE) ID: CVE-2017-0364 Common Vulnerability Exposure (CVE) ID: CVE-2017-0365 Common Vulnerability Exposure (CVE) ID: CVE-2017-0366 Common Vulnerability Exposure (CVE) ID: CVE-2017-0368 Common Vulnerability Exposure (CVE) ID: CVE-2017-0369 Common Vulnerability Exposure (CVE) ID: CVE-2017-0370
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.