Mediawiki

Mediawiki

395 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2024-40600

Exploit
  • EPSS 0.13%
  • Veröffentlicht 07.07.2024 00:15:10
  • Zuletzt bearbeitet 21.11.2024 09:31:21

An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

6.5

CVE-2024-40601

  • EPSS 0.07%
  • Veröffentlicht 07.07.2024 00:15:10
  • Zuletzt bearbeitet 21.11.2024 09:31:21

An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules.

4.8

CVE-2024-40602

  • EPSS 0.13%
  • Veröffentlicht 07.07.2024 00:15:10
  • Zuletzt bearbeitet 14.03.2025 18:15:29

An issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

4.3

CVE-2024-40603

  • EPSS 0.06%
  • Veröffentlicht 07.07.2024 00:15:10
  • Zuletzt bearbeitet 17.03.2025 22:15:12

An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request.

4.8

CVE-2024-40604

Exploit
  • EPSS 0.1%
  • Veröffentlicht 07.07.2024 00:15:10
  • Zuletzt bearbeitet 18.03.2025 19:15:43

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries.

4.8

CVE-2024-40605

Exploit
  • EPSS 0.1%
  • Veröffentlicht 07.07.2024 00:15:10
  • Zuletzt bearbeitet 14.03.2025 14:15:16

An issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.

6.1

CVE-2024-34500

  • EPSS 0.3%
  • Veröffentlicht 05.05.2024 19:15:07
  • Zuletzt bearbeitet 04.11.2025 18:16:22

An issue was discovered in the UnlinkedWikibase extension in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. XSS can occur through an interface message. Error messages (in the $err var) are not escaped before being passed to ...

9.8

CVE-2024-34502

  • EPSS 0.16%
  • Veröffentlicht 05.05.2024 19:15:07
  • Zuletzt bearbeitet 04.11.2025 18:16:22

An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. Loading Special:MergeLexemes will (attempt to) make an edit that merges the from-id to the to-id, even if the request was not a POST...

7.5

CVE-2024-34506

Exploit
  • EPSS 0.17%
  • Veröffentlicht 05.05.2024 19:15:07
  • Zuletzt bearbeitet 04.11.2025 18:16:22

An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands...

7.4

CVE-2024-34507

Exploit
  • EPSS 0.44%
  • Veröffentlicht 05.05.2024 19:15:07
  • Zuletzt bearbeitet 04.11.2025 18:16:22

An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. XSS can occur because of mishandling of the 0x1b character, as demonstrated by Special:RecentChanges#%1...