Filters

Debian Debian LinuxStored XSS leads to privilege escalation in MediaWiki v1.40.0

First published (updated )

MediaWiki MediaWikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situatio…

First published (updated )

MediaWiki MediaWikiAn issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x…

First published (updated )

MediaWiki MediaWikiSQL Injection

First published (updated )

MediaWiki MediaWikiThe admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa116…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWiki MediaWikiAn issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter ext…

First published (updated )

MediaWiki MediaWikiAn issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issu…

First published (updated )

MediaWiki MediaWikiAn issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission…

First published (updated )

Fedoraproject FedoraAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2. MWOAuthConsumerSubmitCo…

First published (updated )

MediaWiki MediaWikiAn issue was discovered in the AbuseFilter extension in MediaWiki through 1.36. If the MediaWiki:Abu…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWiki MediaWikiAn issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for Centr…

First published (updated )

MediaWiki MediaWikiIn the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to …

First published (updated )

MediaWiki MediaWikiMediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which c…

First published (updated )

composer/mediawiki/coreDirect POST to Special:ChangeEmail will bypass reauth check

First published (updated )

MediaWiki MediaWikiParameters injection in SyntaxHighlight results in multiple vulnerabilities

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MediaWiki MediaWikiapi.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected F…

First published (updated )

MediaWiki MediaWikiXEE

First published (updated )

MediaWiki MediaWikiThe MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1…

First published (updated )

MediaWiki MediaWikiThe User::randomPassword function in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1…

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203