mediawiki vulnerabilities (Ubuntu)
198 vulnerabilities.
mediawikiUbuntuPotential javascript injection attack enabled by Unicode normalization in Action API2.1 LowmediawikiUbuntuLogPager.php: Restriction enforcer functions do not correctly enforce suppression restrictions2.1 LowmediawikiUbuntuCascading protection is not preventing file reversions0.0 NonemediawikiUbuntu"reupload-own" restriction can be bypassed by reverting file0.0 NonemediawikiUbuntui18n XSS vulnerability in HTMLMultiSelectField when sections are used0.0 NonemediawikiUbuntuImproper permissions handling in MediaWiki AbuseFilter5.3 MediummediawikiUbuntuCitizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline6.5 MediummediawikiUbuntuAn issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7...7.4 HighmediawikiUbuntuAn issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki...6.1 MediummediawikiUbuntuAn issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x...6.5 MediummediawikiUbuntuAn issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40...7.5 HighmediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1...6.1 MediummediawikiUbuntuCross-site Scripting in Semantic MediaWiki6.1 MediummediawikiUbuntuAn issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39...4.3 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1...5.4 MediummediawikiUbuntuAn issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1...5.3 MediummediawikiUbuntuMediaWiki Denial of Service vulnerability7.5 HighmediawikiUbuntuStored XSS leads to privilege escalation in MediaWiki v1.40.07.3 HighmediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x...5.3 MediummediawikiUbuntuAn issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through...5.3 MediummediawikiUbuntuAn issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes...5.4 MediummediawikiUbuntuAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain...9.8 CriticalmediawikiUbuntuMediaWiki Cross-site Scripting vulnerability6.1 MediummediawikiUbuntuAn issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it...5.3 MediummediawikiUbuntuAn issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through...5.3 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x...6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...4.3 MediummediawikiUbuntuX-Forwarded-For header allows brute-forcing autoblocked IP addresses9.8 CriticalmediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...5.5 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...5.3 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...5.3 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...5.3 MediummediawikiUbuntuInefficient Regular Expression Complexity in moment7.5 HighmediawikiUbuntuAn issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions...6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x...6.1 MediummediawikiUbuntuChange in port should be considered a change in origin in Guzzle7.7 HighmediawikiUbuntuCURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle7.7 HighmediawikiUbuntuThe RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is...6.1 MediummediawikiUbuntuA denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index...7.5 HighmediawikiUbuntuA denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1...7.5 HighmediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37...4.4 MediummediawikiUbuntuAn XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1...6.1 MediummediawikiUbuntuIn MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.5.3 MediummediawikiUbuntuIn MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can...6.1 MediummediawikiUbuntuIn MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit...6.1 MediummediawikiUbuntuIn MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as...6.1 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.4 MediummediawikiUbuntuAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 Medium- Show moreLoading…