CVE-2014-5243

MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not enforce an IFRAME protection mechanism for transcluded pages, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.77% chance of exploitation in the next 30 days, 77th percentile

Published

2014-08-22

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://bugzilla.wikimedia.org/show_bug.cgi?id=65778

References

• CVE Record
• NVD entry

Related

• CVE-2014-5240
• CVE-2014-5246
• CVE-2014-5216
• CVE-2014-5258
• CVE-2014-5210
• CVE-2014-5265