Skip to contentMediawiki vulnerabilities
Newest
- mediawiki, debian linux +1 moreA denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1...CVE-2022-28203Fix available7.5 High
- mediawiki, debian linux +1 moreAn issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37...CVE-2022-28201Fix available4.4 Medium
- mediawikiAn issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof...CVE-2022-28209Fix available9.8 Critical
- mediawikiAn issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter...CVE-2022-28206Fix available9.8 Critical
- mediawikiAn issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl...CVE-2022-28205Fix available9.8 Critical
- mediawiki, debian linux, fedoraproject fedora +2 moreAn XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1...CVE-2022-28202Fix available6.1 Medium
- mediawikiMediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows...CVE-2017-0371Fix available7.5 High
- mediawiki shortdescription, starcitizentools mediawiki-extensions-shortdescription +1 moreCross-site Scripting in ShortDescription extensionCVE-2022-217104.7 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46147Fix available8.8 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46148Fix available6.5 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46149Fix available7.5 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46150Fix available4.8 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-46146Fix available5.4 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.CVE-2021-45471Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can...CVE-2021-45472Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit...CVE-2021-45473Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as...CVE-2021-45474Fix available6.1 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44856Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44855Fix available5.4 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44854Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-45038Fix available5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44858Fix available7.5 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...CVE-2021-44857Fix available6.5 Medium
- mediawikiAn issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple...CVE-2021-42045Fix available5.4 Medium
- mediawikiAn issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev...CVE-2021-42046Fix available6.1 Medium
- mediawikiAn issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the...CVE-2021-42047Fix available5.4 Medium
- mediawikiAn issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add...CVE-2021-42048Fix available4.8 Medium
- mediawikiAn issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters...CVE-2021-42049Fix available6.5 Medium
- mediawikiAn issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control...CVE-2021-42040Fix available7.5 High
- mediawikiAn issue was discovered in CentralAuth in MediaWiki through 1.36.2. The rightsnone MediaWiki...CVE-2021-42041Fix available6.1 Medium
- mediawikiAn issue was discovered in SpecialEditGrowthConfig in the GrowthExperiments extension in...CVE-2021-42042Fix available4.8 Medium
- mediawikiAn issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through...CVE-2021-42043Fix available6.1 Medium
- mediawikiAn issue was discovered in the Mentor dashboard in the GrowthExperiments extension in MediaWiki...CVE-2021-42044Fix available4.8 Medium
- mediawikiThe ReplaceText extension through 1.41 for MediaWiki has Incorrect Access Control. When a user is...CVE-2021-41801Fix available8.8 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki allows a denial of serviceCVE-2021-41800Fix available5.3 Medium
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query...CVE-2021-41799Fix available7.5 High
- mediawiki, fedoraproject fedora +1 moreMediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being...CVE-2021-41798Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2....CVE-2021-31556Fix available9.8 Critical
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special...CVE-2021-36125Fix available7.5 High
- mediawikiAn issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki...CVE-2021-36126Fix available9.8 Critical
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special...CVE-2021-36127Fix available4.3 Medium
- mediawikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for...CVE-2021-36128Fix available9.8 Critical
- mediawikiAn issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups...CVE-2021-36129Fix available4.3 Medium
- mediawikiAn XSS issue was discovered in the SocialProfile extension in MediaWiki through 1.36. Within...CVE-2021-36130Fix available4.8 Medium
- mediawikiAn XSS issue was discovered in the SportsTeams extension in MediaWiki through 1.36. Within...CVE-2021-36131Fix available4.8 Medium
- mediawikiAn issue was discovered in the FileImporter extension in MediaWiki through 1.36. For certain...CVE-2021-36132Fix available8.8 High
- mediawiki, debian linux, fedoraproject fedora +2 moreIn MediaWiki before 1.31.15, 1.32.x through 1.35.x before 1.35.3, and 1.36.x before 1.36.1, bots...CVE-2021-35197Fix available7.5 High
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The...CVE-2021-31545Fix available5.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly...CVE-2021-31546Fix available4.3 Medium
- mediawikiAn issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its...CVE-2021-31547Fix available4.3 Medium
- Show moreLoading…