mediawiki vulnerabilities (Debian)
300 vulnerabilities.
mediawikiDebianA denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1...7.5 HighmediawikiDebianAn issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37...4.4 MediummediawikiDebianAn XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1...6.1 MediummediawikiDebianMediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows...7.5 HighmediawikiDebianAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.4 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...7.5 HighmediawikiDebianAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...6.5 MediummediawikiDebianThe ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is...8.8 HighmediawikiDebianMediaWiki allows a denial of service5.3 MediummediawikiDebianMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...7.5 HighmediawikiDebianMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...6.1 MediummediawikiDebianIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...7.5 HighmediawikiDebianmediawiki - regression updateNo scoremediawikiDebianAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When...4.3 MediummediawikiDebianWikimedia Parsoid vulnerable to Cross-site Scripting (XSS)6.1 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...6.1 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...6.1 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....5.3 MediummediawikiDebianPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 HighmediawikiDebianInfinite Loop in Pygments7.5 HighmediawikiDebianMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace...6.1 MediummediawikiDebianIn MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS...6.1 MediummediawikiDebianAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...5.3 MediummediawikiDebianMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...6.1 MediummediawikiDebianMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...5.3 MediummediawikiDebianIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...7.5 HighmediawikiDebianmediawiki - regression updateNo scoremediawikiDebianmediawiki - regression updateNo scoremediawikiDebianMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiDebianMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiDebianOATHAuth extension in MediaWiki is not implementing rate limit7.5 HighmediawikiDebianMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiDebianMediaWiki Special:UserRights exposes the existence of hidden users5.3 MediummediawikiDebianMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiDebianmholt PapaParse papaparse.js redos3.5 LowmediawikiDebianFirejail through 0.9.62 mishandles shell metacharacters during use of the --output or --output...9.8 CriticalmediawikiDebianFirejail through 0.9.62 does not honor the -- end-of-options indicator after the --output option,...7.8 HighmediawikiDebianimg_auth.php may leak private extension images into the public cache3.1 LowmediawikiDebianMediaWiki makeCollapsible allows applying event handler to any CSS selector5.3 MediummediawikiDebianMediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1)...8.1 HighmediawikiDebianPossible to circumvent title-blacklist6.1 MediummediawikiDebianMediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which...7.5 HighmediawikiDebianMediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of...7.5 HighmediawikiDebianA cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4...6.1 MediummediawikiDebianmediawiki allows deleted text to be exposed7.5 High- Show moreLoading…