CVE-2012-4379

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct…

published October 19, 2017

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct clickjacking attacks via an embedded API response in an IFRAME element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01446 · 72.9th percentile
Published
2017-10-19T21:00Z
EPSS history
Timeline
  • 19 OCT 21:00Z
    MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to conduct…
    cvelistv5