CVE-2004-2152
published 2004-12-31CVE-2004-2152: Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or…
PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.21%
65.2th percentile
Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mediawiki | < mediawiki 1.4.9 (bookworm) | mediawiki 1.4.9 (bookworm) |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | — | — |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
| mediawiki | mediawiki | >= 0 < 1.4.9 | 1.4.9 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2004-2152: mediawiki - Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki...
vendor_debian·2004·CVSS 4.3
CVE-2004-2152 [MEDIUM] CVE-2004-2152: mediawiki - Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki...
Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.
Scope: local
bookworm: resolved (fixed in 1.4.9)
bullseye: resolved (fixed in 1.4.9)
forky: resolved (fixed in 1.4.9)
sid: resolved (fixed in 1.4.9)
trixie: resolved (fixed in 1.4.9)
GHSA
GHSA-7xh4-qggh-f88q: Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1
ghsa_unreviewed·2022-04-29
CVE-2004-2152 [MEDIUM] GHSA-7xh4-qggh-f88q: Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1
Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.
OSV
CVE-2004-2152: Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1
osv·2004-12-31·CVSS 4.3
CVE-2004-2152 [MEDIUM] CVE-2004-2152: Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1
Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/12692/http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=271848http://www.osvdb.org/10454http://www.securityfocus.com/bid/11302https://exchange.xforce.ibmcloud.com/vulnerabilities/17578http://secunia.com/advisories/12692/http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=271848http://www.osvdb.org/10454http://www.securityfocus.com/bid/11302https://exchange.xforce.ibmcloud.com/vulnerabilities/17578
2004-12-31
Published