CVE-2010-1189

Description

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka CSS validation issue.

Risk Information

Base Score

7.1

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

EPSS Score

Exploitation Probability

0.381

Associated Vulnerability

Vulnerability	OS Platform
Update mediawiki 1.5.8 to latest version	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234