mediawiki vulnerabilities (Debian)
300 vulnerabilities.
mediawikiDebianMediaWiki information disclosure5.3 MediummediawikiDebianWikimedia information leak vulnerability7.5 HighmediawikiDebianWikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple7.5 HighmediawikiDebianMediaWiki Incorrect Access Control vulnerability7.5 HighmediawikiDebianMediaWiki Cross-site Scripting (XSS)6.1 MediummediawikiDebianWikimedia MediaWik exposed suppressed log in RevisionDelete page6.5 MediummediawikiDebianMediaWiki Incorrect Access Control vulnerability6.5 MediummediawikiDebianWikimedia MediaWiki Incorrect Access Control vulnerability9.8 CriticalmediawikiDebianMediaWiki Incorrect Access Control vulnerability5.3 MediummediawikiDebianWikimedia MediaWiki allows CSRF8.8 HighmediawikiDebianXSS in jQuery as used in Drupal, Backdrop CMS, and other products6.1 MediummediawikiDebianBotPasswords can bypass CentralAuth's account lock6.5 MediummediawikiDebianInformation disclosure in Special:Redirect/logid6.5 MediummediawikiDebian$wgRateLimits entry for 'user' overrides 'newbie'4.3 MediummediawikiDebianParameters injection in SyntaxHighlight results in multiple vulnerabilities9.8 CriticalmediawikiDebianHaving LocalisationCache directory default to system tmp directory is insecure8.8 HighmediawikiDebianThe language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2...7.5 HighmediawikiDebianThe language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2...7.5 HighmediawikiDebianMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers...5.3 MediummediawikiDebianThe implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1...6.1 MediummediawikiDebianMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is...7.5 HighmediawikiDebianapi.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a...9.8 CriticalmediawikiDebianMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the ...6.1 MediummediawikiDebianMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before...6.1 MediummediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.18.5 and 1.19.x before 1.19.2...6.1 MediummediawikiDebianMediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata,...4.9 MediummediawikiDebianMediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass...7.5 HighmediawikiDebianMediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options...6.5 MediummediawikiDebianMediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access...7.5 HighmediawikiDebianSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter5.3 MediummediawikiDebianSysops can undelete pages, although the page is protected against it6.5 MediummediawikiDebianMake rawHTML mode not apply to system messages5.3 MediummediawikiDebianSVG filter evasion using default attribute values in DTD declaration5.4 MediummediawikiDebianXSS in SearchHighlighter::highlightText() [requires non-default config]4.7 MediummediawikiDebianSpecial:Search allows redirects to any interwiki link6.1 MediummediawikiDebianSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites6.1 MediummediawikiDebian"Mark all pages visited" on the watchlist does not require a CSRF token8.8 HighmediawikiDebianapi.log contains passwords in plaintext7.8 HighmediawikiDebianMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote...6.5 MediummediawikiDebianMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head...7.5 HighmediawikiDebianCross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki...6.1 MediummediawikiDebianCross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki...6.1 MediummediawikiDebianMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when ...7.5 HighmediawikiDebianApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows...7.5 HighmediawikiDebianThe (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads,...5.3 MediummediawikiDebianMediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do...5.3 MediummediawikiDebianThe User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x...9.8 CriticalmediawikiDebianThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before...8.8 HighmediawikiDebianThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x...8.8 HighmediawikiDebianCross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25...6.1 Medium- Show moreLoading…