Re: CVE request: mediawiki invalid usernames on Special:PasswordReset were parsed as wikitext

[cve-assign () mitre org]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> https://bugzilla.wikimedia.org/show_bug.cgi?id=65501

> invalid usernames on Special:PasswordReset were parsed as wikitext ...
> could potentially lead to an xss crossing a privilege boundary

Use CVE-2014-3966.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTjzUKAAoJEKllVAevmvms3m0H/30lQ070bNB7iCT0dq78dqK7
68dv98nM/DFos1TnyvBrYPQp+opf1fGv2jjquenpnAfI/rG0/jp9sxDhAC6tn/NT
EHkCwiGMfgaG0T52NaxCQC2TitKh9eqTIrhP2DznmXfq64mqtAKM7HVNkgm8K7ES
JGMeih9pxoURZPmLG+3NRFs4AtZQuPKQYEhBQxTocuCfxcjQarfdvA02i+R0niv8
GJHLGnSrxlVaWOwOy2eF6557ASyUzIY4T4txh3jHvmht/0xtVTRuB2MRUHaJ6cjw
hOn8/EnVO9OgsGku7+KuwkOXLpkIJEBJTjke/CoE10dCY52dtCykJv8OA9HRNwE=
=e6Ww
-----END PGP SIGNATURE-----