mediawiki vulnerabilities (Mageia)
164 vulnerabilities.
-
mediawikiMageia Stored XSS through system messages in VisualEditor 0.0 None -
mediawikiMageia Extension:TextExtracts does not check for authorizeRead when returning extracts 2.7 Low -
mediawikiMageia Watchlist group mode reveals authors of edits with hidden authorship 1.2 Low -
mediawikiMageia EventStreams publishes suppressed recent change entries that are suppressed from their creation 2.7 Low -
mediawikiMageia API list=allpages with maxsize is making really slow queries 1.7 Low -
mediawikiMageia Stored XSS through system messages in Special:RecentChangesLinked (MW Core) 0.0 None -
mediawikiMageia Suppressed blocked IP is visible in Special:BlockList, RC, and other places 1.7 Low -
mediawikiMageia Sanitizer::validateAttributes data-XSS 0.0 None -
mediawikiMageia Add rate limiting to ApiFancyCaptchaReload 0.0 None -
mediawikiMageia Stored i18n XSS exposed by security patch for T402077 0.0 None -
mediawikiMageia Reauth for enabling 2FA can be bypassed by submitting a form 0.0 None -
mediawikiMageia HTML injection in feed output from i18n message 6.9 Medium -
mediawikiMageia AbuseFilter log interfaces expose global private and hidden filters when central DB is not available 2.3 Low -
mediawikiMageia Potential javascript injection attack enabled by Unicode normalization in Action API 2.1 Low -
mediawikiMageia LogPager.php: Restriction enforcer functions do not correctly enforce suppression restrictions 2.1 Low -
mediawikiMageia Cascading protection is not preventing file reversions 0.0 None -
mediawikiMageia "reupload-own" restriction can be bypassed by reverting file 0.0 None -
mediawikiMageia i18n XSS vulnerability in HTMLMultiSelectField when sections are used 0.0 None -
mediawikiMageia An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki... 6.1 Medium -
mediawikiMageia An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x... 6.5 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1... 6.1 Medium -
mediawikiMageia An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39... 4.3 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1... 5.4 Medium -
mediawikiMageia An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1... 5.3 Medium -
mediawikiMageia MediaWiki Denial of Service vulnerability 7.5 High -
mediawikiMageia Stored XSS leads to privilege escalation in MediaWiki v1.40.0 7.3 High -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x... 5.3 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x... 6.1 Medium -
mediawikiMageia Improper header name validation in guzzlehttp/psr7 5.3 Medium -
mediawikiMageia X-Forwarded-For header allows brute-forcing autoblocked IP addresses 9.8 Critical -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39... 5.5 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39... 6.1 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39... 5.3 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x... 5.3 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x... 5.3 Medium -
mediawikiMageia Change in port should be considered a change in origin in Guzzle 7.7 High -
mediawikiMageia CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle 7.7 High -
mediawikiMageia Fix failure to strip Authorization header on HTTP downgrade in Guzzle 7.5 High -
mediawikiMageia Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle 7.5 High -
mediawikiMageia Cross-domain cookie leakage in Guzzle 8.0 High -
mediawikiMageia A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index... 7.5 High -
mediawikiMageia A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1... 7.5 High -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37... 4.4 Medium -
mediawikiMageia An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1... 6.1 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37... 5.3 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37... 5.4 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37... 5.3 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37... 5.3 Medium -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37... 7.5 High -
mediawikiMageia An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37... 6.5 Medium - Show olderLoading…