Filter
AND
AND
composer/mediawiki/coreDirect POST to Special:ChangeEmail will bypass reauth check
9.8
First published (updated )
composer/mediawiki/corePotential enwiki DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
7.5
First published (updated )
MediaWiki MediaWikiSVG filter evasion using default attribute values in DTD declaration
5.4
First published (updated )
MediaWiki MediaWikiHaving LocalisationCache directory default to system tmp directory is insecure
8.8
First published (updated )
MediaWiki MediaWikiParameters injection in SyntaxHighlight results in multiple vulnerabilities
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWiki"Mark all pages visited" on the watchlist does not require a CSRF token
8.8
First published (updated )
MediaWiki MediaWikiSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites
6.1
First published (updated )
MediaWiki MediaWikiSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter
5.3
First published (updated )
MediaWiki MediaWikiSysops can undelete pages, although the page is protected against it
6.5
First published (updated )
MediaWiki MediaWikiSpecial:Search allows redirects to any interwiki link
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restri…
7.5
First published (updated )
MediaWiki MediaWikiMake rawHTML mode not apply to system messages
5.3
First published (updated )
MediaWiki MediaWikiapi.log contains passwords in plaintext
7.8
First published (updated )
MediaWiki MediaWikiXSS in SearchHighlighter::highlightText() [requires non-default config]
4.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.