Re: CVE Request -- MediaWiki - v1.15.2

["Steven M. Christey" <coley () linus mitre org>]

On Tue, 9 Mar 2010, Jan Lieskovsky wrote:

>  a, a CSS validation issue was discovered which allows editors to display
>     external images in wiki pages.

Use CVE-2010-1189

>  b, a data leakage vulnerability was discovered in thumb.php which affects
>     wikis which restrict access to private files using img_auth.php, or
>     some similar scheme.

Use CVE-2010-1190

- Steve