mediawiki/core vulnerabilities (Packagist)

29 vulnerabilities.

• mediawiki/core Packagist MediaWiki Denial of Service vulnerability CVE-2023-45363 Fix available EPSS 23.8% 7.5 HighOctober 9, 2023
• mediawiki/core Packagist Stored XSS leads to privilege escalation in MediaWiki v1.40.0 CVE-2023-3550 Fix available 7.3 HighSeptember 25, 2023
• mediawiki/core Packagist X-Forwarded-For header allows brute-forcing autoblocked IP addresses CVE-2023-29141 Fix available 9.8 CriticalMarch 31, 2023
• mediawiki/core Packagist MediaWiki allows a denial of service CVE-2021-41800 Fix available 5.3 MediumOctober 1, 2021
• mediawiki/core Packagist MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-25815 Fix available 6.1 MediumSeptember 27, 2020
• mediawiki/core Packagist MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-25828 Fix available 6.1 MediumSeptember 25, 2020
• mediawiki/core Packagist OATHAuth extension in MediaWiki is not implementing rate limit CVE-2020-25827 Fix available 7.5 HighSeptember 25, 2020
• mediawiki/core Packagist MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-25814 Fix available 6.1 MediumSeptember 25, 2020
• mediawiki/core Packagist MediaWiki Special:UserRights exposes the existence of hidden users CVE-2020-25813 Fix available 5.3 MediumSeptember 25, 2020
• mediawiki/core Packagist MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-25812 Fix available 6.1 MediumSeptember 25, 2020
• mediawiki/core Packagist img_auth.php may leak private extension images into the public cache CVE-2020-15005 Fix available 3.1 LowJune 24, 2020
• mediawiki/core Packagist MediaWiki Open Redirect vulnerability CVE-2020-10959 Fix available 6.1 MediumJune 2, 2020
• mediawiki/core Packagist MediaWiki makeCollapsible allows applying event handler to any CSS selector CVE-2020-10960 Fix available 5.3 MediumApril 2, 2020
• mediawiki/core Packagist Possible to circumvent title-blacklist CVE-2019-19709 Fix available 6.1 MediumDecember 11, 2019
• mediawiki/core Packagist MediaWiki information disclosure CVE-2019-16738 Fix available 5.3 MediumSeptember 26, 2019
• mediawiki/core Packagist Wikimedia information leak vulnerability CVE-2019-12474 Fix available 7.5 HighJune 12, 2019
• mediawiki/core Packagist Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple CVE-2019-12473 Fix available 7.5 HighJune 12, 2019
• mediawiki/core Packagist MediaWiki Incorrect Access Control vulnerability CVE-2019-12472 Fix available 7.5 HighJune 12, 2019
• mediawiki/core Packagist MediaWiki Cross-site Scripting (XSS) CVE-2019-12471 Fix available 6.1 MediumJune 12, 2019
• mediawiki/core Packagist Wikimedia MediaWik exposed suppressed log in RevisionDelete page CVE-2019-12470 Fix available 6.5 MediumJune 12, 2019
• mediawiki/core Packagist MediaWiki Incorrect Access Control vulnerability CVE-2019-12469 Fix available 6.5 MediumJune 12, 2019
• mediawiki/core Packagist Wikimedia MediaWiki Incorrect Access Control vulnerability CVE-2019-12468 Fix available 9.8 CriticalJune 12, 2019
• mediawiki/core Packagist MediaWiki Incorrect Access Control vulnerability CVE-2019-12467 Fix available 5.3 MediumJune 12, 2019
• mediawiki/core Packagist Wikimedia MediaWiki allows CSRF CVE-2019-12466 Fix available 8.8 HighJune 12, 2019
• mediawiki/core Packagist Tarball was missing .htaccess files CVE-2018-13258 Fix available 5.3 MediumOctober 4, 2018
• mediawiki/core Packagist BotPasswords can bypass CentralAuth's account lock CVE-2018-0505 Fix available 6.5 MediumSeptember 22, 2018
• mediawiki/core Packagist Information disclosure in Special:Redirect/logid CVE-2018-0504 Fix available 6.5 MediumSeptember 22, 2018
• mediawiki/core Packagist $wgRateLimits entry for 'user' overrides 'newbie' CVE-2018-0503 Fix available 4.3 MediumSeptember 22, 2018
• mediawiki/core Packagist Cross-site scripting vulnerability in includes/actions/InfoAction.php CVE-2014-2853 Fix available 4.3 MediumApril 28, 2014