CVE-2014-9476
Publication date 16 January 2015
Last updated 24 July 2024
Ubuntu priority
MediaWiki 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote attackers to bypass CORS restrictions in $wgCrossSiteAJAXdomains via a domain that has a partial match to an allowed origin, as demonstrated by “http://en.wikipedia.org.evilsite.example/.”
Status
Package | Ubuntu Release | Status |
---|---|---|
mediawiki | ||
18.04 LTS bionic |
Not affected
|
|
16.04 LTS xenial | Not in release | |
14.04 LTS trusty | Not in release | |