Candidate: CVE-2008-5249 PublicDate: 2008-12-19 17:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5249 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508868 Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_mediawiki: upstream_mediawiki: released (1:1.13.3-1) dapper_mediawiki: ignored (reached end-of-life) gutsy_mediawiki: needed (reached end-of-life) hardy_mediawiki: released (1:1.11.2-2ubuntu0.2) intrepid_mediawiki: released (1:1.12.0-2ubuntu0.2) jaunty_mediawiki: not-affected (1:1.13.3-1) karmic_mediawiki: not-affected (1:1.13.3-1) devel_mediawiki: not-affected (1:1.13.3-1)