Skip to contentMediawiki vulnerabilities
Newest
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. A MediaWiki...CVE-2021-31548Fix available6.5 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special...CVE-2021-31549Fix available4.3 Medium
- mediawikiAn issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted...CVE-2021-31550Fix available5.4 Medium
- mediawikiAn issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads...CVE-2021-31551Fix available6.1 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...CVE-2021-31552Fix available5.4 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki...CVE-2021-31553Fix available6.5 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly...CVE-2021-31554Fix available5.4 Medium
- mediawikiAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate...CVE-2021-31555Fix available7.5 High
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30159Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30156Fix available4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30155Fix available4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When...CVE-2021-30152Fix available4.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...CVE-2021-30154Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On...CVE-2021-30157Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2....CVE-2021-30158Fix available5.3 Medium
- mediawikiThe API in the Push extension for MediaWiki through 1.35 did not require an edit token in...CVE-2020-29004Fix available8.8 High
- mediawikiThe API in the Push extension for MediaWiki through 1.35 used cleartext for ApiPush credentials,...CVE-2020-29005Fix available7.5 High
- mediawikiAn issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1....CVE-2020-35622Fix available6.1 Medium
- mediawikiAn issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper...CVE-2020-35623Fix available7.5 High
- mediawikiAn issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin...CVE-2020-35624Fix available5.3 Medium
- mediawikiAn issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the...CVE-2020-35625Fix available8.8 High
- mediawikiAn issue was discovered in the PushToWatch extension for MediaWiki through 1.35.1. The primary...CVE-2020-35626Fix available8.8 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace...CVE-2020-35478Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS...CVE-2020-35474Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreAn issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and...CVE-2020-35480Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry...CVE-2020-35479Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreMediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one...CVE-2020-35477Fix available5.3 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can...CVE-2020-35475Fix available7.5 High
- mediawikiincludes/CologneBlueTemplate.php in the CologneBlue skin for MediaWiki through 1.35 allows XSS...CVE-2020-29002Fix available4.8 Medium
- mediawikiThe PollNY extension for MediaWiki through 1.35 allows XSS via an answer option for a poll...CVE-2020-29003Fix available5.4 Medium
- mediawikiThe RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title...CVE-2020-27957Fix available5.4 Medium
- mediawiki skin\The Cosmos Skin for MediaWiki through 1.35.0 has stored XSS because MediaWiki messages were not...CVE-2020-276206.1 Medium
- mediawikiThe FileImporter extension in MediaWiki through 1.35.0 was not properly attributing various user...CVE-2020-27621Fix available4.3 Medium
- mediawiki, fedoraproject fedora +1 moreAn information leak was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1...CVE-2020-25869Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25815Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the FileImporter extension for MediaWiki before 1.34.4. An attacker...CVE-2020-26121Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreXSS exists in the MobileFrontend extension for MediaWiki before 1.34.4 because section.line is...CVE-2020-26120Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25828Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreOATHAuth extension in MediaWiki is not implementing rate limitCVE-2020-25827Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25814Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Special:UserRights exposes the existence of hidden usersCVE-2020-25813Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki Cross-site Scripting (XSS) vulnerabilityCVE-2020-25812Fix available6.1 Medium
- mediawiki, debian linux, fedoraproject fedora +2 moreimg_auth.php may leak private extension images into the public cacheCVE-2020-15005Fix available3.1 Low
- mediawikiMediaWiki Open Redirect vulnerabilityCVE-2020-10959Fix available6.1 Medium
- mediawikiThe CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain...CVE-2020-120517.5 High
- mediawikiMediaWiki makeCollapsible allows applying event handler to any CSS selectorCVE-2020-10960Fix available5.3 Medium
- mediawiki abusefilterAn issue was discovered in the AbuseFilter extension for MediaWiki. includes/special...CVE-2019-165287.5 High
- mediawiki checkuserAn issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit...CVE-2019-165295.3 Medium
- mediawiki mobilefrontendIn the MobileFrontend extension for MediaWiki, XSS exists within the edit summary field of the...CVE-2019-151246.1 Medium
- mediawikiIn the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related...CVE-2020-10534Fix available9.8 Critical
- Show moreLoading…