Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and 1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an info action.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site scripting (XSS) vulnerability in includes/actions/InfoAction.php in MediaWiki before 1.21.9 and
    1.22.x before 1.22.6 allows remote attackers to inject arbitrary web script or HTML via the sort key in an
    info action. (CVE-2014-2853)

The remote host is affected by the vulnerability described in GLSA-201502-04 (MediaWiki: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MediaWiki. Please       review the CVE identifiers and MediaWiki announcement referenced below       for details.
  Impact :

    A remote attacker may be able to execute arbitrary code with the       privileges of the process, create a Denial of Service condition, obtain       sensitive information, bypass security restrictions, and inject arbitrary       web script or HTML.
  Workaround :

    There is no known workaround at this time.

According to its version number, the instance of MediaWiki running on the remote host is affected by a cross-site scripting vulnerability. A flaw exists with 'sortKey' in the 'InfoAction.php' script. This allows a remote attacker to execute arbitrary code within the server and browser trust relationship.

Nessus has not tested for this issue but has instead relied on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
431841	SCA: security update for mediawiki/core (GHSA-6h86-9r5g-f2h5)	Tenable Cloud Security	SCA Checks	Local	medium
431841	SCA: security update for mediawiki/core (GHSA-6h86-9r5g-f2h5)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
81227	GLSA-201502-04 : MediaWiki: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
73804	MediaWiki < 1.21.9 / 1.22.6 'InfoAction.php' XSS	Nessus	CGI abuses : XSS	Remote	medium

Detections

Analytics

CVE-2014-2853

medium

Tenable Plugins

medium

medium

critical

medium