Mediawiki

Mediawiki

395 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-28206

Exploit
  • EPSS 0.37%
  • Veröffentlicht 30.03.2022 07:15:07
  • Zuletzt bearbeitet 21.11.2024 06:56:57

An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles the check for edit rights.

9.8

CVE-2022-28209

  • EPSS 0.36%
  • Veröffentlicht 30.03.2022 07:15:07
  • Zuletzt bearbeitet 21.11.2024 06:56:57

An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission in the AntiSpoof extension is incorrect.

6.1

CVE-2022-28202

  • EPSS 0.58%
  • Veröffentlicht 30.03.2022 06:15:06
  • Zuletzt bearbeitet 21.11.2024 06:56:56

An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight, widthheightpage, and nbytes properties of messages are not escaped when used in galleries or Special:RevisionDelete.

7.5

CVE-2017-0371

Exploit
  • EPSS 0.21%
  • Veröffentlicht 18.02.2022 23:15:07
  • Zuletzt bearbeitet 21.11.2024 03:02:51

MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title url);" attack within a DIV element that has an att...

4.8

CVE-2021-46150

Exploit
  • EPSS 0.18%
  • Veröffentlicht 10.01.2022 14:11:29
  • Zuletzt bearbeitet 21.11.2024 06:33:41

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Special:CheckUserLog allows CheckUser XSS because of date mishandling, as demonstrated by an XSS payload in MediaWiki:October.

6.5

CVE-2021-46148

  • EPSS 0.25%
  • Veröffentlicht 10.01.2022 14:11:28
  • Zuletzt bearbeitet 21.11.2024 06:33:41

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Some unprivileged users can view confidential information (e.g., IP addresses and User-Agent headers for election traffic) on a testwiki SecurePoll in...

7.5

CVE-2021-46149

  • EPSS 0.27%
  • Veröffentlicht 10.01.2022 14:11:28
  • Zuletzt bearbeitet 21.11.2024 06:33:41

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service (resource consumption) can be accomplished by searching for a very long key in a Language Name Search.

5.4

CVE-2021-46146

  • EPSS 0.16%
  • Veröffentlicht 10.01.2022 14:11:27
  • Zuletzt bearbeitet 21.11.2024 06:33:41

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInfo component is vulnerable to XSS via the caption fields for a given media file.

8.8

CVE-2021-46147

  • EPSS 0.11%
  • Veröffentlicht 10.01.2022 14:11:27
  • Zuletzt bearbeitet 21.11.2024 06:33:41

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. MassEditRegex allows CSRF.

5.3

CVE-2021-45471

  • EPSS 0.31%
  • Veröffentlicht 24.12.2021 02:15:07
  • Zuletzt bearbeitet 21.11.2024 06:32:16

In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.