CVE-2013-4568: mediawiki
Vulnerability summary
CVE-2013-4568 is a medium (CVSS 4.3) vulnerability in mediawiki. EPSS estimates a 2.10% chance of exploitation in the next 30 days, higher than 81.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 13-12-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Incomplete blacklist vulnerability in Sanitizer::checkCss in MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain non-ASCII characters in CSS, as demonstrated using variations of "expression" containing (1) full width characters or (2) IPA extensions, which are converted and rendered by Internet Explorer.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.10%
Chance of exploitation in the next 30 days
Percentile
81%
Versus all other CVEs
30-day change
0.00 pp
From 2.10% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- mediawiki< 1:1.19.8+dfsg-2.2
Mediawiki1 product
- mediawiki1.20 | 1.20.1 | 1.20.2 | 1.20.3 | 1.20.4 | 1.20.5 | 1.20.6 | 1.20.7 | 1.21 | 1.21.1 | 1.21.2 | ≤ 1.19.8 | 1.19 | 1.19:beta_1 | 1.19:beta_2 | 1.19.0 | 1.19.1 | 1.19.2 | 1.19.3 | 1.19.4 | 1.19.5 | 1.19.6 | 1.19.7
Ubuntu1 product
- mediawiki< 1:1.19.14+dfsg-1
3 vendors · 3 products
References
11 links
- lists.wikimedia.org/pipermail/mediawiki-announce/2013-November/000135.htmlMailing ListX Refsource MLISTREPORT
- lists.fedoraproject.org/pipermail/package-announce/2013-December/123011.htmlVendor AdvisoryX Refsource FEDORAREPORT
- lists.fedoraproject.org/pipermail/package-announce/2013-December/122998.htmlVendor AdvisoryX Refsource FEDORAREPORT