Filter
AND
AND
MediaWiki MediaWikiHaving LocalisationCache directory default to system tmp directory is insecure
8.8
First published (updated )
MediaWiki MediaWikiSysops can undelete pages, although the page is protected against it
6.5
First published (updated )
MediaWiki MediaWiki"Mark all pages visited" on the watchlist does not require a CSRF token
8.8
First published (updated )
MediaWiki MediaWikiSpecial:UserLogin?returnto=interwiki:foo will redirect to external sites
6.1
First published (updated )
MediaWiki MediaWikiSpecial:Search allows redirects to any interwiki link
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiSpam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter
5.3
First published (updated )
MediaWiki MediaWikiParameters injection in SyntaxHighlight results in multiple vulnerabilities
9.8
First published (updated )
MediaWiki MediaWikiSVG filter evasion using default attribute values in DTD declaration
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote authenticated…
6.5
First published (updated )
MediaWiki MediaWikiMediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access restri…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MediaWiki MediaWikiMake rawHTML mode not apply to system messages
5.3
First published (updated )
MediaWiki MediaWikiapi.log contains passwords in plaintext
7.8
First published (updated )
MediaWiki MediaWikiXSS in SearchHighlighter::highlightText() [requires non-default config]
4.7
First published (updated )
composer/mediawiki/corePotential enwiki DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
7.5
First published (updated )
composer/mediawiki/coreDirect POST to Special:ChangeEmail will bypass reauth check
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.