mediawiki vulnerabilities (Mageia)
164 vulnerabilities.
mediawikiMageiaThe ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is...8.8 HighmediawikiMageiaMediaWiki allows a denial of service5.3 MediummediawikiMageiaMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...7.5 HighmediawikiMageiaMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...6.1 MediummediawikiMageiaIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...7.5 HighmediawikiMageiaAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 MediummediawikiMageiaAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 MediummediawikiMageiaAn issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When...4.3 MediummediawikiMageiaAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....5.3 MediummediawikiMageiaPygments vulnerable to Regular Expression Denial of Service (ReDoS)7.5 HighmediawikiMageiaInfinite Loop in Pygments7.5 HighmediawikiMageiaAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...5.3 MediummediawikiMageiaMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...6.1 MediummediawikiMageiaMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...5.3 MediummediawikiMageiaIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...7.5 HighmediawikiMageiaAn information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1...7.5 HighmediawikiMageiaMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiMageiaMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiMageiaOATHAuth extension in MediaWiki is not implementing rate limit7.5 HighmediawikiMageiaMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiMageiaMediaWiki Special:UserRights exposes the existence of hidden users5.3 MediummediawikiMageiaMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiMageiamholt PapaParse papaparse.js redos3.5 LowmediawikiMageiaimg_auth.php may leak private extension images into the public cache3.1 LowmediawikiMageiaMediaWiki makeCollapsible allows applying event handler to any CSS selector5.3 MediummediawikiMageiaPossible to circumvent title-blacklist6.1 MediummediawikiMageiaMediaWiki information disclosure5.3 MediummediawikiMageiaWikimedia information leak vulnerability7.5 HighmediawikiMageiaWikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple7.5 HighmediawikiMageiaMediaWiki Incorrect Access Control vulnerability7.5 HighmediawikiMageiaMediaWiki Cross-site Scripting (XSS)6.1 MediummediawikiMageiaWikimedia MediaWik exposed suppressed log in RevisionDelete page6.5 MediummediawikiMageiaMediaWiki Incorrect Access Control vulnerability6.5 MediummediawikiMageiaWikimedia MediaWiki Incorrect Access Control vulnerability9.8 CriticalmediawikiMageiaMediaWiki Incorrect Access Control vulnerability5.3 MediummediawikiMageiaWikimedia MediaWiki allows CSRF8.8 HighmediawikiMageiaXSS in jQuery as used in Drupal, Backdrop CMS, and other products6.1 MediummediawikiMageiaBotPasswords can bypass CentralAuth's account lock6.5 MediummediawikiMageiaInformation disclosure in Special:Redirect/logid6.5 MediummediawikiMageia$wgRateLimits entry for 'user' overrides 'newbie'4.3 MediummediawikiMageiaThe language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2...7.5 HighmediawikiMageiaThe language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2...7.5 HighmediawikiMageiaMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers...5.3 MediummediawikiMageiaThe implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1...6.1 MediummediawikiMageiaMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is...7.5 HighmediawikiMageiaapi.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a...9.8 CriticalmediawikiMageiaMediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the ...6.1 MediummediawikiMageiaCode Injection in PHPUnit9.8 CriticalmediawikiMageiaSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter5.3 MediummediawikiMageiaSysops can undelete pages, although the page is protected against it6.5 Medium- Show moreLoading…