Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2010-1189 | First vendor Publication | 2010-03-31 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue." |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1189 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2010-07-12 | Name : Fedora Update for mediawiki FEDORA-2010-6335 File : nvt/gb_fedora_2010_6335_mediawiki_fc12.nasl |
| 2010-03-30 | Name : Debian Security Advisory DSA 2022-1 (mediawiki) File : nvt/deb_2022_1.nasl |
| 2010-03-15 | Name : MediaWiki 'CSS validation' Information Disclosure Vulnerability File : nvt/gb_mediawiki_38621.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 62798 | MediaWiki CSS Validation Function External Image Information Disclosure |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-07-07 | Name : The remote Fedora host is missing a security update. File : fedora_2010-6335.nasl - Type : ACT_GATHER_INFO |
| 2010-04-27 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_mediawiki-100423.nasl - Type : ACT_GATHER_INFO |
| 2010-03-25 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-2022.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:09:03 |
|
| 2024-11-28 12:21:32 |
|
| 2021-05-04 12:11:28 |
|
| 2021-04-22 01:11:56 |
|
| 2020-05-24 01:06:25 |
|
| 2020-05-23 01:41:52 |
|
| 2020-05-23 00:25:31 |
|
| 2018-10-23 12:02:42 |
|
| 2016-04-26 19:42:10 |
|
| 2014-02-17 10:54:30 |
|
| 2013-05-10 23:21:32 |
|
