Skip to contentMediawiki Mediawik vulnerabilities
- mediawikiAn issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3....CVE-2023-29140Fix available5.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with...CVE-2023-29139Fix available6.5 Medium
- mediawikiAn issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The...CVE-2023-29137Fix available4.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22912Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22910Fix available5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various...CVE-2022-39193Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2022-47927Fix available5.5 Medium
- mediawiki, fedoraproject fedora +1 moreIn the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API...CVE-2023-22945Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22911Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...CVE-2023-22909Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...CVE-2022-41767Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...CVE-2022-41765Fix available5.3 Medium
- mediawikiAn issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for...CVE-2022-39194Fix available4.9 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions...CVE-2022-34912Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x...CVE-2022-34911Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is...CVE-2022-34750Fix available7.5 High
- mediawiki rss for mediawikiThe RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is...CVE-2022-299696.1 Medium
- mediawikiAn issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak...CVE-2022-28323Fix available7.5 High
- mediawikiThe Private Domains extension for MediaWiki through 1.37.2 (before...CVE-2022-29903Fix available4.3 Medium
- mediawikiThe SemanticDrilldown extension for MediaWiki through 1.37.2 (before...CVE-2022-29904Fix availableEPSS 16.8%9.8 Critical
- mediawikiThe FanBoxes extension for MediaWiki through 1.37.2 (before...CVE-2022-29905Fix available4.3 Medium
- mediawikiThe admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before...CVE-2022-29906Fix available9.8 Critical
- mediawikiThe Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df)...CVE-2022-29907Fix available6.1 Medium
- mediawikiA denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index...CVE-2022-28204Fix available7.5 High
- mediawiki, debian linux +1 moreA denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1...CVE-2022-28203Fix available7.5 High
- mediawiki, debian linux +1 moreAn issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37...CVE-2022-28201Fix available4.4 Medium
- mediawikiAn issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof...CVE-2022-28209Fix available9.8 Critical
- mediawikiAn issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter...CVE-2022-28206Fix available9.8 Critical
- mediawikiAn issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl...CVE-2022-28205Fix available9.8 Critical
- mediawiki, debian linux, fedoraproject fedora +2 moreAn XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1...CVE-2022-28202Fix available6.1 Medium
- mediawikiMediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows...CVE-2017-0371Fix available7.5 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46147Fix available8.8 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46148Fix available6.5 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46149Fix available7.5 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46150Fix available4.8 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46146Fix available5.4 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.CVE-2021-45471Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can...CVE-2021-45472Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit...CVE-2021-45473Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as...CVE-2021-45474Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44856Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44855Fix available5.4 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44854Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-45038Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44858Fix available7.5 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44857Fix available6.5 Medium
- mediawikiAn issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple...CVE-2021-42045Fix available5.4 Medium
- mediawikiAn issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev...CVE-2021-42046Fix available6.1 Medium
- mediawikiAn issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the...CVE-2021-42047Fix available5.4 Medium
- mediawikiAn issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add...CVE-2021-42048Fix available4.8 Medium
- Show moreLoading…