Mediawiki vulnerabilities
455 vulnerabilities
Known vulnerabilities in Mediawiki products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 20 products.
Products
20- Mediawiki417 vulnerabilities
- Cargo10 vulnerabilities
- Checkuser9 vulnerabilities
- Abusefilter3 vulnerabilities
- Visual Editor3 vulnerabilities
- Mobilefrontend2 vulnerabilities
- Createredirect1 vulnerabilities
- Massmessage1 vulnerabilities
- Matomo1 vulnerabilities
- Mediawik1 vulnerabilities
- Mediawiki (Syntaxhighlight Extension)1 vulnerabilities
- Proofreadpage1 vulnerabilities
- Rss For Mediawiki1 vulnerabilities
- Rssreader1 vulnerabilities
- Score1 vulnerabilities
- Scribunto1 vulnerabilities
- Semantic Drilldown1 vulnerabilities
- Shortdescription1 vulnerabilities
- Wikisource Category Browser1 vulnerabilities
- Mediawiki Botquery Ext0 vulnerabilities
CVE-2018-13258ubuntumediawiki+1
EPSS score2.25%
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.CVE-2018-0503debianmediawiki+3EPSS score1.56%
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.CVE-2018-0504debianmediawiki+3EPSS score2.88%
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logidCVE-2018-0505debianmediawiki+3EPSS score1.97%
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lockCVE-2013-2114debianmediawiki+2EPSS score2.34%
Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.CVE-2013-2032debianmediawiki+3EPSS score2.51%
MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extension that only implements one of these blocks.CVE-2013-2031debianmediawiki+2EPSS score2.50%
MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CDATA section containing valid UTF-7 encoded sequences in a SVG file, which is then incorrectly interpreted as UTF-8 by Chrome and Firefox.CVE-2013-1816debianmediawiki+4EPSS score2.68%
MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request.CVE-2013-1951debianmediawiki+3EPSS score1.64%
A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names.CVE-2013-1818mediawikimediawikiEPSS score2.10%
maintenance/mwdoc-filter.php in MediaWiki before 1.20.3 allows remote attackers to read arbitrary files via unspecified vectors.CVE-2013-1817debianmediawiki+4EPSS score2.51%
MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information.CVE-2013-4572debianmediawiki+4EPSS score2.14%
The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-Control header to cache session cookies when a user is autocreated, which allows remote attackers to authenticate as the created user.CVE-2013-4302debianmediawiki+2EPSS score1.99%
(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5) ApiQueryDeletedrevs.php, (6) ApiTokens.php, and (7) ApiUnblock.php in includes/api/ in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow remote attackers to obtain CSRF tokens and bypass the cross-site request forgery (CSRF) protection mechanism via a JSONP request to wiki/api.php.CVE-2013-4303debianmediawiki+3EPSS score1.53%
includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does not properly detect extensions when there are an even number of "." (period) characters in a string, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the siprop parameter in a query action to wiki/api.php.CVE-2013-4301debianmediawiki+1EPSS score2.08%
includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a "<" (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message.CVE-2013-4573ubuntumediawiki+1EPSS score1.16%
Cross-site scripting (XSS) vulnerability in the ZeroRatedMobileAccess extension for MediaWiki 1.19.x before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to inject arbitrary web script or HTML via the "to" parameter to index.php.CVE-2013-4307mediawikimediawikiEPSS score1.95%
Multiple cross-site scripting (XSS) vulnerabilities in repo/includes/EntityView.php in the Wikibase extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow (1) remote attackers to inject arbitrary web script or HTML via a label in the "In other languages" section or (2) remote administrators to inject arbitrary web script or HTML via a description.CVE-2013-4569mediawikimediawikiEPSS score1.82%
The CleanChanges extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3, when "Group changes by page in recent changes and watchlist" is enabled, allows remote attackers to obtain sensitive information (revision-deleted IPs) via the Recent Changes page.CVE-2013-4304brion_vibbercentralauth_extension+1EPSS score2.08%
The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a valid CentralAuthUser object in the centralauth_User cookie even when a user has not successfully logged in, which allows remote attackers to bypass authentication without a password.CVE-2013-4570mediawikimediawikiEPSS score1.75%
The zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to converting Lua data structures to PHP, as demonstrated by passing { [{}] = 1 } to a module function.