VULNERABILITY INTELLIGENCE

CVE-2010-1189

CVSS score5 MEDIUM
EPSS probability1.79%
CISA KEVNot currently listed
Published2010-03-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references