Unscored DSA-3011-1 2 CVEs

mediawiki - security update

Published Aug 23, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	mediawiki	1:1.19.18+dfsg-0+deb7u1

Vulnerabilities 2

Unscored —

CVE-2014-5241

The JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, …

mediawiki Debian

Aug 22, 2014
Unscored —

CVE-2014-5243

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME prot…

mediawiki Debian

Aug 22, 2014