ec926d33f8
CVE-2012-4377 Stored XSS via a File::link to a non-existing image CVE-2012-4378 Multiple DOM-based XSS flaws due improper filtering of uselang parameter CVE-2012-4379 CSRF tokens, available via API, not protected when X-Frame-Options headers used CVE-2012-4380 Did not prevent account creation for IP addresses blocked with GlobalBlocking CVE-2012-4381 Password saved always to the local MediaWiki database CVE-2012-4382 Metadata about blocks |
||
---|---|---|
.. | ||
pkg | ||
distinfo | ||
Makefile |