mediawiki vulnerabilities (Mageia)
164 vulnerabilities.
mediawikiMageiaMake rawHTML mode not apply to system messages5.3 MediummediawikiMageiaSVG filter evasion using default attribute values in DTD declaration5.4 MediummediawikiMageiaXSS in SearchHighlighter::highlightText() [requires non-default config]4.7 MediummediawikiMageiaSpecial:Search allows redirects to any interwiki link6.1 MediummediawikiMageiaSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites6.1 MediummediawikiMageia"Mark all pages visited" on the watchlist does not require a CSRF token8.8 HighmediawikiMageiaapi.log contains passwords in plaintext7.8 HighmediawikiMageiaMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote...6.5 MediummediawikiMageiaMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head...7.5 HighmediawikiMageiaCross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki...6.1 MediummediawikiMageiaCross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki...6.1 MediummediawikiMageiaMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when ...7.5 HighmediawikiMageiaApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows...7.5 HighmediawikiMageiaUpdated mediawiki packages fix security vulnerabilityNo scoremediawikiMageiaThe (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads,...5.3 MediummediawikiMageiaMediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do...5.3 MediummediawikiMageiaThe User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x...9.8 CriticalmediawikiMageiaMediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do...7.5 HighmediawikiMageiaThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before...8.8 HighmediawikiMageiaThe User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12 and 1.24.x...8.8 HighmediawikiMageiaCross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25...6.1 MediummediawikiMageiaMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail...5.0 MediummediawikiMageiaMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly...4.0 MediummediawikiMageiaMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file...6.8 MediummediawikiMageiaThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...6.8 MediummediawikiMageiaThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...3.5 LowmediawikiMageiaUpdated mediawiki packages fix security vulnerabilitiesNo scoremediawikiMageiaCross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows...6.8 MediummediawikiMageiaCross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote...4.3 MediummediawikiMageiaCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1...4.3 MediummediawikiMageiaMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend...7.1 HighmediawikiMageiaMediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers...7.1 HighmediawikiMageiaMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to...5.0 MediummediawikiMageiaMediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle...4.3 MediummediawikiMageiaCross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x...4.3 MediummediawikiMageiaIncomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x...4.3 MediummediawikiMageiaIncomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24,...4.3 MediummediawikiMageiaUpdated mediawiki packages fix security vulnerabilitiesNo scoremediawikiMageiaThe wfMangleFlashPolicy function in OutputHandler.php in MediaWiki before 1.19.22, 1.20.x through...7.5 HighmediawikiMageiaCross-site request forgery (CSRF) vulnerability in the Special:ExpandedTemplates page in...5.1 MediummediawikiMageiaThe (1) Special:Preferences and (2) Special:UserLogin pages in MediaWiki before 1.19.20, 1.22.x...3.5 LowmediawikiMageiaCross-site scripting (XSS) vulnerability in MediaWiki before 1.19.19, 1.22.x before 1.22.11, and...4.3 MediummediawikiMageiaMediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 does not...4.3 MediummediawikiMageiaCross-site scripting (XSS) vulnerability in mediawiki.page.image.pagination.js in MediaWiki 1.22...4.3 MediummediawikiMageiaThe JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through...6.8 MediummediawikiMageiaCross-site scripting (XSS) vulnerability in Special:PasswordReset in MediaWiki before 1.19.16, 1...2.6 LowmediawikiMageiaCross-site scripting vulnerability in includes/actions/InfoAction.php4.3 MediummediawikiMageiaincludes/specials/SpecialChangePassword.php in MediaWiki before 1.19.14, 1.20.x and 1.21.x before...4.0 MediummediawikiMageiaMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to...5.0 MediummediawikiMageiaMediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize...7.5 High- Show moreLoading…