A clickjacking vulnerability was reported in MediaWiki [1]. This could allow a
malicious web site to compromise the account of the user visiting a
MediaWiki-based web site (an attack similar to cross-site scripting). For full
protection, a user needs to be using a browser that supports the
X-Frame-Options feature [2].
MediaWiki 1.16.1 [3] has been released to correct this flaw. For MediaWiki
1.15.x and earlier, a patch [4] is available which denies all framing.
Binary package hint: mediawiki
A clickjacking vulnerability was reported in MediaWiki [1]. This could allow a
malicious web site to compromise the account of the user visiting a
MediaWiki-based web site (an attack similar to cross-site scripting). For full
protection, a user needs to be using a browser that supports the
X-Frame-Options feature [2].
MediaWiki 1.16.1 [3] has been released to correct this flaw. For MediaWiki
1.15.x and earlier, a patch [4] is available which denies all framing.
[1] https:/ /bugzilla. wikimedia. org/show_ bug.cgi? id=CVE- 2011-0003 /developer. mozilla. org/en/ the_x-frame- options_ response_ header svn.wikimedia. org/svnroot/ mediawiki/ tags/REL1_ 16_1/phase3/ RELEASE- NOTES www.mediawiki. org/wiki/ Special: Code/MediaWiki/ 79566
[2] https:/
[3]
http://
[4] http://