mediawiki vulnerabilities (Ubuntu)
198 vulnerabilities.
mediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...7.5 HighmediawikiUbuntuAn issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control...7.5 HighmediawikiUbuntuThe ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is...8.8 HighmediawikiUbuntuMediaWiki allows a denial of service5.3 MediummediawikiUbuntuMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...7.5 HighmediawikiUbuntuMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...6.1 MediummediawikiUbuntuIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...7.5 HighmediawikiUbuntuAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....4.3 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When...4.3 MediummediawikiUbuntuWikimedia Parsoid vulnerable to Cross-site Scripting (XSS)6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....5.3 MediummediawikiUbuntuMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace...6.1 MediummediawikiUbuntuIn MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS...6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...5.3 MediummediawikiUbuntuMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...6.1 MediummediawikiUbuntuMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...5.3 MediummediawikiUbuntuIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...7.5 HighmediawikiUbuntuincludes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS...4.8 MediummediawikiUbuntuThe PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll...5.4 MediummediawikiUbuntuMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiUbuntuMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiUbuntuOATHAuth extension in MediaWiki is not implementing rate limit7.5 HighmediawikiUbuntuMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiUbuntuMediaWiki Special:UserRights exposes the existence of hidden users5.3 MediummediawikiUbuntuMediaWiki Cross-site Scripting (XSS) vulnerability6.1 MediummediawikiUbuntumholt PapaParse papaparse.js redos3.5 LowmediawikiUbuntuimg_auth.php may leak private extension images into the public cache3.1 LowmediawikiUbuntuMediaWiki makeCollapsible allows applying event handler to any CSS selector5.3 MediummediawikiUbuntuPossible to circumvent title-blacklist6.1 MediummediawikiUbuntuMediaWiki information disclosure5.3 MediummediawikiUbuntuWikimedia information leak vulnerability7.5 HighmediawikiUbuntuWikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple7.5 HighmediawikiUbuntuMediaWiki Incorrect Access Control vulnerability7.5 HighmediawikiUbuntuMediaWiki Cross-site Scripting (XSS)6.1 MediummediawikiUbuntuWikimedia MediaWik exposed suppressed log in RevisionDelete page6.5 MediummediawikiUbuntuMediaWiki Incorrect Access Control vulnerability6.5 MediummediawikiUbuntuWikimedia MediaWiki Incorrect Access Control vulnerability9.8 CriticalmediawikiUbuntuMediaWiki Incorrect Access Control vulnerability5.3 MediummediawikiUbuntuWikimedia MediaWiki allows CSRF8.8 HighmediawikiUbuntuXSS in jQuery as used in Drupal, Backdrop CMS, and other products6.1 MediummediawikiUbuntuTarball was missing .htaccess files5.3 MediummediawikiUbuntuBotPasswords can bypass CentralAuth's account lock6.5 MediummediawikiUbuntuInformation disclosure in Special:Redirect/logid6.5 MediummediawikiUbuntu$wgRateLimits entry for 'user' overrides 'newbie'4.3 MediummediawikiUbuntuMediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to...5.3 Medium