Skip to contentWikimedia Foundation vulnerabilities
Newest
- mediawiki, debian linux +1 moreSysops can undelete pages, although the page is protected against itCVE-2017-0369Fix available6.5 Medium
- mediawiki, debian linux +1 moreMake rawHTML mode not apply to system messagesCVE-2017-0368Fix available5.3 Medium
- mediawiki, debian linux +1 moreSVG filter evasion using default attribute values in DTD declarationCVE-2017-0366Fix available5.4 Medium
- mediawiki, debian linux +1 moreXSS in SearchHighlighter::highlightText() [requires non-default config]CVE-2017-0365Fix available4.7 Medium
- mediawiki, debian linux +1 moreSpecial:Search allows redirects to any interwiki linkCVE-2017-0364Fix available6.1 Medium
- mediawiki, debian linux +1 moreSpecial:UserLogin?returnto=interwiki:foo will redirect to external sitesCVE-2017-0363Fix available6.1 Medium
- mediawiki, debian linux +1 more"Mark all pages visited" on the watchlist does not require a CSRF tokenCVE-2017-0362Fix available8.8 High
- mediawiki, debian linux +1 moreapi.log contains passwords in plaintextCVE-2017-0361Fix available7.8 High
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4,...CVE-2013-6451Fix available6.1 Medium
- mediawiki, fedoraproject fedora +1 moreThe CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before...CVE-2013-4572Fix available7.5 High
- mediawikiincludes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x...CVE-2013-4303Fix available6.1 Medium