CVE-2013-4301

Publication date 27 October 2013

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a ”<” (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mediawiki 13.04 raring Ignored
12.10 quantal Ignored
12.04 LTS precise Ignored
10.04 LTS lucid Ignored

Notes

mdeslaur

ubuntu packages have fixed paths. ignoring.