mediawiki vulnerabilities (Ubuntu)
198 vulnerabilities.
-
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu [Unknown description] No score -
mediawikiUbuntu Stored i18n XSSs in CentralNotice 6.1 Medium -
mediawikiUbuntu Stored i18n XSS in MassMessage 6.1 Medium -
mediawikiUbuntu Open Redirect in Special:Book 6.1 Medium -
mediawikiUbuntu XSS in Refreshed skin 6.1 Medium -
mediawikiUbuntu EasyTimeline should not serve image maps as application/xml 9.8 Critical -
mediawikiUbuntu mediawiki/maps: Stored XSS through the overlays parameter in the display_map parser function 8.6 High -
mediawikiUbuntu Remote Code Execution via Unsafe Deserialization in LogItem Import 5.9 Medium -
mediawikiUbuntu Full Account Takeover from BotPasswords and OAuth via action=changeauthenticationdata 5.3 Medium -
mediawikiUbuntu Pretty-printed API output combined with centralauthtoken allows XSS with certain gadgets 0.0 None -
mediawikiUbuntu $wgNonincludableNamespaces can be bypassed by embedding redirect in other namespaces 0.0 None -
mediawikiUbuntu QueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI 5.3 Medium -
mediawikiUbuntu SyntaxHighlight stored XSS via unsanitized 'linelinks' attribute 5.3 Medium -
mediawikiUbuntu mw.Api.getErrorMessage() may return injected HTML if used without errorformat=html 5.3 Medium -
mediawikiUbuntu "Total number of distinct authors" statistic at action=info does not exclude revisions where the author name was deleted 5.3 Medium -
mediawikiUbuntu Core log entries for exceptions and XSS issues in log entry formatting code that may be caused by user-controlled input 0.0 None -
mediawikiUbuntu Users API leaks whether privileged users have their user groups disabled for lack of 2FA 2.1 Low -
mediawikiUbuntu API identification of users on private wikis 5.1 Medium -
mediawikiUbuntu Stored i18n XSS in Special:ApiSandbox when a deprecated module is selected 0.0 None -
mediawikiUbuntu Stored XSS through a system message in the codex version of Special:Block 0.0 None -
mediawikiUbuntu Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation... 2.3 Low -
mediawikiUbuntu action=raw with Special:Mypage subpage title responds with "Content-Type: text/html" on ctype=text/javascript request 0.0 None -
mediawikiUbuntu Customized help link for page protection indicator is relative to subpage name, because the link target is missing the "/wiki/" prefix 2.0 Low -
mediawikiUbuntu Special:UserRights allows viewing user rights from private wiki 1.1 Low -
mediawikiUbuntu Block UI elements in 'tools'-sidebar shows presence of an autoblocked IP 2.1 Low -
mediawikiUbuntu User localization leaked by AbuseFilter + EventStream 5.5 Medium -
mediawikiUbuntu Memory leak in Scribunto causes runJobs.php to run out of memory 2.3 Low -
mediawikiUbuntu RecentChanges entries expose suppressed content via generated log page html 1.3 Low -
mediawikiUbuntu Users API leaks whether privileged users have their user groups disabled for lack of 2FA 5.1 Medium -
mediawikiUbuntu AbuseFilter misuses ::userCanBitfield, exposing access-controlled information 2.1 Low -
mediawikiUbuntu Theoretical i18n XSS in mediawiki.page.preview.js when a page has multiple protection levels 0.0 None -
mediawikiUbuntu Importing leaks IP address of importer via EventStreams 1.3 Low -
mediawikiUbuntu Stored XSS through a system message in Special:ApiSandbox 0.0 None -
mediawikiUbuntu UserInfoCard: Do permission checking when getting counts of global and local edits, new articles and thanks 0.0 None -
mediawikiUbuntu Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')... 0.0 None -
mediawikiUbuntu Action API discussiontoolspageinfo does not check for authorizeRead for the page 2.7 Low -
mediawikiUbuntu CodexTablePager has i18n XSS 0.0 None -
mediawikiUbuntu i18n XSS through Special:Watchlist 0.0 None -
mediawikiUbuntu Stored XSS through system messages in MW Core 0.0 None -
mediawikiUbuntu Stored XSS through system messages provided to CodexHtmlForms 0.0 None - Show olderLoading…