MediaWiki Denial of Service vulnerability
Modified: 10/30/2024
package
pkg:packagist/mediawiki/core
MediaWiki Denial of Service vulnerability
Modified: 10/30/2024
Wikimedia MediaWiki allows CSRF
Modified: 5/19/2024
Mediawiki tarball is missing .htaccess files
Modified: 5/19/2024
MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
Wikimedia information leak vulnerability
Modified: 5/19/2024
MediaWiki Cross-site Scripting (XSS)
Modified: 5/19/2024
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
Modified: 5/19/2024
MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
Mediawiki BotPassword can bypass CentralAuth's account lock
Modified: 5/19/2024
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Modified: 2/18/2025
Cross-site scripting vulnerability in includes/actions/InfoAction.php
Modified: 12/2/2024
MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
Wikimedia MediaWik exposed suppressed log in RevisionDelete page
Modified: 5/19/2024
MediaWiki information disclosure
Modified: 5/19/2024
MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
MediaWiki Special:UserRights exposes the existence of hidden users
Modified: 12/1/2024
MediaWiki allows a denial of service
Modified: 2/20/2024
MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
Mediawiki information disclosure vulnerability
Modified: 5/19/2024
Mediawiki Improper Privilege Management
Modified: 5/19/2024
MediaWiki Open Redirect vulnerability
Modified: 5/19/2024
MediaWiki makeCollapsible allows applying event handler to any CSS selector
Modified: 4/1/2024
Possible to circumvent title-blacklist
Modified: 5/19/2024
MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
OATHAuth extension in MediaWiki is not implementing rate limit
Modified: 5/19/2024
Wikimedia MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
img_auth.php may leak private extension images into the public cache
Modified: 12/2/2024