Browse CVEs

MEDIUM 6.1 CVE-2015-10058 A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. T… Wikisource Category Browser 2015-07-10+ Fix from $1,6002023-01-17 MEDIUM 5.3 CVE-2022-41765 An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. HTMLUserTextField exposes the existenc… Mediawiki 1.35.8 / 1.37.5+ Fix from $1,6002022-12-26 MEDIUM 5.3 CVE-2022-41767 An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. When changes made by an IP address are… Mediawiki 1.35.8 / 1.37.5+ Fix from $1,6002022-12-26 MEDIUM 5.3 CVE-2021-44856 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via… Mediawiki 1.35.5 / 1.36.3+ Fix from $1,6002022-12-26 MEDIUM 5.4 CVE-2021-44855 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. There is Blind Stored XSS via a URL to the Upload… Mediawiki 1.35.5 / 1.36.3+ Fix from $1,6002022-12-26 MEDIUM 5.3 CVE-2021-44854 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private… Mediawiki 1.35.5 / 1.36.3+ Fix from $1,6002022-12-26 MEDIUM 6.1 CVE-2022-4561 A vulnerability classified as problematic has been found in SemanticDrilldown Extension. Affected is the function printFilterLine of the file include… Semantic Drilldown 2022-08-12+ Fix from $1,6002022-12-16 MEDIUM 6.5 CVE-2021-42049 An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they s… Mediawiki after 1.36.2 Fix from $1,6002022-09-29 MEDIUM 6.1 CVE-2021-42046 An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly esca… Mediawiki after 1.36.2 Fix from $1,6002022-09-29 MEDIUM 5.4 CVE-2021-42045 An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing thei… Mediawiki after 1.36.2 Fix from $1,6002022-09-29 MEDIUM 5.4 CVE-2021-42047 An issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the Mentor Dashboard feature enabled, users can login w… Mediawiki after 1.36.2 Fix from $1,6002022-09-29 HIGH 7.5 CVE-2022-28204 A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3A… Mediawiki 1.37.2+ Fix from $1,9502022-09-19 HIGH 7.5 CVE-2022-34750 An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thousand characters. Unfortunatel… Mediawiki after 1.38.1 Fix from $1,9502022-06-28 MEDIUM 6.1 CVE-2022-29969 The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true). Rss For Mediawiki 2022-04-29+ Fix from $1,6002022-05-02 HIGH 7.5 CVE-2022-28323 An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported, Mediawiki after 1.37.2 Fix from $1,9502022-04-30 CRITICAL 9.8 CVE-2022-29904EPSS 17% The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' … Mediawiki after 1.37.2 Fix from $2,3002022-04-29 CRITICAL 9.8 CVE-2022-29906 The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the q… Mediawiki after 1.37.2 Fix from $2,3002022-04-29 MEDIUM 6.1 CVE-2022-29907 The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages. Mediawiki after 1.37.2 Fix from $1,6002022-04-29 HIGH 7.5 CVE-2022-29547 The CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the user has permissions to edit the target page. This c… Createredirect 2022-04-14+ Fix from $1,9502022-04-21 CRITICAL 9.8 CVE-2022-28205 An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiring in the future. Mediawiki after 1.37.1 Fix from $2,3002022-03-30 CRITICAL 9.8 CVE-2022-28206 An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights. Mediawiki after 1.37.1 Fix from $2,3002022-03-30 CRITICAL 9.8 CVE-2022-28209 An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission in the AntiSpoof extension is incorrect. Mediawiki after 1.37.1 Fix from $2,3002022-03-30 HIGH 7.5 CVE-2017-0371 MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki … Mediawiki 1.23.16 / 1.27.2+ Fix from $1,9502022-02-18 MEDIUM 6.1 CVE-2022-21710 ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting (XSS) vulnerability exists in version… Shortdescription 2.3.4+ Fix from $1,6002022-01-24 HIGH 7.5 CVE-2021-46149 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service (resource consumption) can be… Mediawiki 1.35.5 / 1.36.3+ Fix from $1,9502022-01-10 MEDIUM 6.5 CVE-2021-46148 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Some unprivileged users can view confidential inf… Mediawiki 1.35.5 / 1.36.3+ Fix from $1,6002022-01-10 HIGH 8.8 CVE-2021-46147 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. MassEditRegex allows CSRF. Mediawiki 1.35.5 / 1.36.3+ Fix from $1,9502022-01-10 MEDIUM 5.4 CVE-2021-46146 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInfo component is vulnerable to … Mediawiki 1.35.5 / 1.36.3+ Fix from $1,6002022-01-10 HIGH 7.5 CVE-2021-44858 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=edit&undo= followed … Mediawiki 1.35.5 / 1.36.3+ Fix from $1,9502021-12-20 MEDIUM 6.5 CVE-2021-44857 An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. It is possible to use action=mcrundo followed by … Mediawiki 1.35.5 / 1.36.3+ Fix from $1,6002021-12-17