Skip to contentMediawiki Mediawik vulnerabilities
- mediawikiAn issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters...CVE-2021-42049Fix available6.5 Medium
- mediawikiAn issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control...CVE-2021-42040Fix available7.5 High
- mediawikiAn issue was discovered in CentralAuth in MediaWiki through 1.36.2. The rightsnone MediaWiki...CVE-2021-42041Fix available6.1 Medium
- mediawikiAn issue was discovered in SpecialEditGrowthConfig in the GrowthExperiments extension in...CVE-2021-42042Fix available4.8 Medium
- mediawikiAn issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through...CVE-2021-42043Fix available6.1 Medium
- mediawikiAn issue was discovered in the Mentor dashboard in the GrowthExperiments extension in MediaWiki...CVE-2021-42044Fix available4.8 Medium
- mediawikiThe ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is...CVE-2021-41801Fix available8.8 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki allows a denial of serviceCVE-2021-41800Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...CVE-2021-41799Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...CVE-2021-41798Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2....CVE-2021-31556Fix available9.8 Critical
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special...CVE-2021-36125Fix available7.5 High
- mediawikiAn issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki...CVE-2021-36126Fix available9.8 Critical
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special...CVE-2021-36127Fix available4.3 Medium
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for...CVE-2021-36128Fix available9.8 Critical
- mediawikiAn issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups...CVE-2021-36129Fix available4.3 Medium
- mediawikiAn XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within...CVE-2021-36130Fix available4.8 Medium
- mediawikiAn XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within...CVE-2021-36131Fix available4.8 Medium
- mediawikiAn issue was discovered in the FileImporter extension in MediaWiki through 1.36. For certain...CVE-2021-36132Fix available8.8 High
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...CVE-2021-35197Fix available7.5 High
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The...CVE-2021-31545Fix available5.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...CVE-2021-31546Fix available4.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its...CVE-2021-31547Fix available4.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. A MediaWiki...CVE-2021-31548Fix available6.5 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special...CVE-2021-31549Fix available4.3 Medium
- mediawikiAn issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted...CVE-2021-31550Fix available5.4 Medium
- mediawikiAn issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads...CVE-2021-31551Fix available6.1 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...CVE-2021-31552Fix available5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki...CVE-2021-31553Fix available6.5 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly...CVE-2021-31554Fix available5.4 Medium
- mediawikiAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate...CVE-2021-31555Fix available7.5 High
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30159Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30156Fix available4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30155Fix available4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When...CVE-2021-30152Fix available4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...CVE-2021-30154Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...CVE-2021-30157Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30158Fix available5.3 Medium
- mediawikiThe API in the Push extension for MediaWiki through 1.35 did not require an edit token in...CVE-2020-29004Fix available8.8 High
- mediawikiThe API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials,...CVE-2020-29005Fix available7.5 High
- mediawikiAn issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1....CVE-2020-35622Fix available6.1 Medium
- mediawikiAn issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper...CVE-2020-35623Fix available7.5 High
- mediawikiAn issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin...CVE-2020-35624Fix available5.3 Medium
- mediawikiAn issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the...CVE-2020-35625Fix available8.8 High
- mediawikiAn issue was discovered in the PushToWatch extension for MediaWiki through 1.35.1. The primary...CVE-2020-35626Fix available8.8 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace...CVE-2020-35478Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS...CVE-2020-35474Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...CVE-2020-35480Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...CVE-2020-35479Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...CVE-2020-35477Fix available5.3 Medium
- Show moreLoading…