![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2014-5243 |
Description: | MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. |
Test IDs: | None available |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2014-5243 Debian Security Information: DSA-3011 (Google Search) http://www.debian.org/security/2014/dsa-3011 http://www.mandriva.com/security/advisories?name=MDVSA-2014:153 https://lists.wikimedia.org/pipermail/mediawiki-announce/2014-July/000157.html http://openwall.com/lists/oss-security/2014/08/14/5 http://secunia.com/advisories/59738 |