Security Advisory
CVE-2013-6453
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML.