CVE-2015-10058
Last modified
CVE-2015-10058 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipulation of the argument lang leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 764f4e8ce3f9242637df77530c70ae8a2ec4b6a1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218415.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mediawiki | Wikisource Category Browser | < 2015-07-10 |
References
- https://github.com/wikisource/ws-cat-browser/commit/764f4e8ce3f9242637df77530c70ae8a2ec4b6a1Patch, Third Party Advisory
- https://vuldb.com/?ctiid.218415Third Party Advisory, VDB Entry
- https://vuldb.com/?id.218415Permissions Required, Third Party Advisory, VDB Entry
- https://github.com/wikisource/ws-cat-browser/commit/764f4e8ce3f9242637df77530c70ae8a2ec4b6a1Patch, Third Party Advisory
- https://vuldb.com/?ctiid.218415Third Party Advisory, VDB Entry
- https://vuldb.com/?id.218415Permissions Required, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-10058?
How severe is CVE-2015-10058?
How do I fix CVE-2015-10058?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-10052** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was c…6.1
- CVE-2015-10053A vulnerability classified as critical has been found in pro…9.8
- CVE-2015-10054A vulnerability, which was classified as critical, was found…9.8
- CVE-2015-10055A vulnerability was found in PictureThisWebServer and classi…9.8
- CVE-2015-10056A vulnerability was found in 2071174A vinylmap. It has been …9.8
- CVE-2015-10057A vulnerability was found in Little Apps Little Software Sta…9.8
- CVE-2015-10059A vulnerability has been found in s134328 Webapplication-Veg…6.1
- CVE-2015-1006A vulnerable file in Opto 22 PAC Project Professional versio…
- CVE-2015-10060A vulnerability was found in MNBikeways database and classif…9.8
- CVE-2015-10061A vulnerability was found in evandro-machado Trabalho-Web2. …9.8
- CVE-2015-10062A vulnerability, which was classified as problematic, was fo…9.8
- CVE-2015-10063A vulnerability was found in saemorris TheRadSystem and clas…9.8
Are you affected by CVE-2015-10058?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
