Browse CVEs

MEDIUM 5.4 CVE-2024-23171 An issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. T… Mediawiki 1.35.14 / 1.39.6+ Fix from $1,6002024-01-12 MEDIUM 5.4 CVE-2024-23172 An issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS ca… Mediawiki 1.35.14 / 1.39.6+ Fix from $1,6002024-01-12 MEDIUM 5.4 CVE-2024-23174 An issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. XSS c… Mediawiki 1.35.14 / 1.39.6+ Fix from $1,6002024-01-12 MEDIUM 6.1 CVE-2023-51704 An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogForm… Mediawiki 1.35.14 / 1.39.6+ Fix from $1,6002023-12-22 MEDIUM 5.4 CVE-2023-45360 An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessage… Mediawiki 1.35.12 / 1.39.5+ Fix from $1,6002023-11-03 HIGH 7.5 CVE-2023-45371 An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There … Mediawiki 1.35.12 / 1.39.5+ Fix from $1,9502023-10-09 MEDIUM 6.1 CVE-2023-45373 An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. X… Mediawiki 1.35.12 / 1.39.5+ Fix from $1,6002023-10-09 MEDIUM 5.3 CVE-2023-45370 An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Spo… Mediawiki 1.35.12 / 1.39.5+ Fix from $1,6002023-10-09 MEDIUM 5.3 CVE-2023-45372 An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During… Mediawiki 1.35.12 / 1.39.5+ Fix from $1,6002023-10-09 MEDIUM 5.3 CVE-2023-45374 An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It … Mediawiki 1.35.12 / 1.39.5+ Fix from $1,6002023-10-09 MEDIUM 6.5 CVE-2023-45367 An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. A use… Mediawiki 1.35.12 / 1.39.5+ Fix from $1,6002023-10-09 MEDIUM 5.3 CVE-2023-36674 An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possi… Mediawiki 1.35.11 / 1.38.7+ Fix from $1,6002023-08-20 CRITICAL 9.8 CVE-2023-37303 An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to block a user fails after a temp… Mediawiki after 1.39.3 Fix from $2,3002023-06-30 MEDIUM 6.1 CVE-2023-37302 An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also … Mediawiki after 1.39.3 Fix from $1,6002023-06-30 MEDIUM 5.4 CVE-2023-37304 An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes/DoubleWiki.php allows XSS via the column alignment feature. Mediawiki after 1.39.3 Fix from $1,6002023-06-30 MEDIUM 5.3 CVE-2023-37300 An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorrect access control for visibi… Mediawiki after 1.39.3 Fix from $1,6002023-06-30 MEDIUM 5.3 CVE-2023-37301 An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity for undo and restore, the in… Mediawiki after 1.39.3 Fix from $1,6002023-06-30 MEDIUM 5.3 CVE-2023-37305 An issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through 1.39.3. In includes/Page/PageContentHandler.php and… Mediawiki after 1.39.3 Fix from $1,6002023-06-30 MEDIUM 6.1 CVE-2023-37254 An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using t… Mediawiki after 1.39.3 Fix from $1,6002023-06-29 MEDIUM 6.1 CVE-2023-37255 An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vulnerable … Mediawiki after 1.39.3 Fix from $1,6002023-06-29 MEDIUM 6.1 CVE-2023-37256 An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically… Mediawiki after 1.39.3 Fix from $1,6002023-06-29 MEDIUM 6.1 CVE-2023-37251 An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not pr… Mediawiki after 1.39.3 Fix from $1,6002023-06-29 MEDIUM 6.1 CVE-2023-36675 An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLog… Mediawiki 1.35.11 / 1.38.7+ Fix from $1,6002023-06-26 CRITICAL 9.8 CVE-2020-29007 The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond executable. … Score after 0.3.0 Fix from $2,3002023-04-15 MEDIUM 6.5 CVE-2023-29139 An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog AP… Mediawiki after 1.39.3 Fix from $1,6002023-03-31 MEDIUM 5.3 CVE-2023-29140 An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see edits for which the username … Mediawiki after 1.39.3 Fix from $1,6002023-03-31 MEDIUM 6.1 CVE-2017-20175 A vulnerability classified as problematic has been found in DaSchTour matomo-mediawiki-extension up to 2.4.2 on MediaWiki. This affects an unknown pa… Matomo 2.4.3+ Fix from $1,6002023-02-05 MEDIUM 5.3 CVE-2022-39193 An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various components of this extension can expose information on the p… Mediawiki Patch available Fix from $1,6002023-01-20 MEDIUM 5.4 CVE-2023-22910 An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. There is XSS in Wikibase date form… Mediawiki 1.35.9 / 1.38.5+ Fix from $1,6002023-01-20 MEDIUM 5.3 CVE-2023-22912 An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely … Mediawiki 1.35.9 / 1.38.5+ Fix from $1,6002023-01-20