CVE-2010-1189 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-1189 Interim 1 3 2021-06-09T08:54:06Z current 2021-05-30T12:50:58Z 2021-06-09T08:54:06Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-1189 MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue." The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html E-Mail link for SUSE-SR:2010:010 https://lists.opensuse.org/opensuse-updates/2010-04/msg00081.html E-Mail link for openSUSE-SU-2010:0154-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue." CVE-2010-1189 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N