HIGH7.5Packagist
GHSA-w5fx-cx7f-6vr9· BIT-mediawiki-2023-45363, CVE-2023-45363MediaWiki Denial of Service vulnerability
Modified: 10/30/2024
package
Packagist/mediawiki/core
pkg:packagist/mediawiki/core
HIGH8.8Packagist
GHSA-27fw-r78j-h898· CVE-2019-12466Wikimedia MediaWiki allows CSRF
Modified: 5/19/2024
MEDIUM5.3Packagist
GHSA-2c28-7gwv-cpgf· CVE-2018-13258Mediawiki tarball is missing .htaccess files
Modified: 5/19/2024
MEDIUM6.1Packagist
GHSA-2f58-vf6g-6p8x· BIT-mediawiki-2020-25815, CVE-2020-25815MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
HIGH7.5Packagist
GHSA-2qrr-c2gh-pr35· CVE-2019-12474Wikimedia information leak vulnerability
Modified: 5/19/2024
MEDIUM6.1Packagist
GHSA-2rm7-xxx8-35jh· CVE-2019-12471MediaWiki Cross-site Scripting (XSS)
Modified: 5/19/2024
HIGH7.5Packagist
GHSA-33xw-x3pr-rvqj· CVE-2019-12473Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
Modified: 5/19/2024
MEDIUM6.1Packagist
GHSA-4vr7-m8p8-434h· BIT-mediawiki-2020-25814, CVE-2020-25814MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
MEDIUM6.5Packagist
GHSA-5c6w-f4w2-2grp· CVE-2018-0505Mediawiki BotPassword can bypass CentralAuth's account lock
Modified: 5/19/2024
CRITICAL9.8Packagist
GHSA-5vj8-g3qg-4qh6· BIT-mediawiki-2023-29141, CVE-2023-29141X-Forwarded-For header allows brute-forcing autoblocked IP addresses
Modified: 2/18/2025
MEDIUMPackagist
GHSA-6h86-9r5g-f2h5· CVE-2014-2853Cross-site scripting vulnerability in includes/actions/InfoAction.php
Modified: 12/2/2024
MEDIUM5.3Packagist
GHSA-6vfg-8ppv-h5hg· CVE-2019-12467MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
MEDIUM6.5Packagist
GHSA-733q-m38x-q7cc· CVE-2019-12470Wikimedia MediaWik exposed suppressed log in RevisionDelete page
Modified: 5/19/2024
MEDIUM5.3Packagist
GHSA-7hwr-f745-5rwq· CVE-2019-16738MediaWiki information disclosure
Modified: 5/19/2024
HIGH7.5Packagist
GHSA-7mqg-5fgh-xh4r· CVE-2019-12472MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
MEDIUM5.3Packagist
GHSA-c4rj-wrmq-52rj· BIT-mediawiki-2020-25813, CVE-2020-25813MediaWiki Special:UserRights exposes the existence of hidden users
Modified: 12/1/2024
MEDIUM5.3Packagist
GHSA-c8wv-qwwc-6j73· BIT-mediawiki-2021-41800, CVE-2021-41800MediaWiki allows a denial of service
Modified: 2/20/2024
MEDIUM6.1Packagist
GHSA-h8qx-mj6v-2934· BIT-mediawiki-2020-25828, CVE-2020-25828MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
MEDIUM6.5Packagist
GHSA-hr8v-f4g2-p66f· CVE-2018-0504Mediawiki information disclosure vulnerability
Modified: 5/19/2024
MEDIUM4.3Packagist
GHSA-mhfv-9h99-jwg7· CVE-2018-0503Mediawiki Improper Privilege Management
Modified: 5/19/2024
MEDIUM6.1Packagist
GHSA-mqhw-wq8p-vf5r· BIT-mediawiki-2020-10959, CVE-2020-10959MediaWiki Open Redirect vulnerability
Modified: 5/19/2024
MEDIUM5.3Packagist
GHSA-pfm2-mqwj-ggm5· BIT-mediawiki-2020-10960, CVE-2020-10960MediaWiki makeCollapsible allows applying event handler to any CSS selector
Modified: 4/1/2024
MEDIUM6.1Packagist
GHSA-pjv5-vv93-p648· CVE-2019-19709Possible to circumvent title-blacklist
Modified: 5/19/2024
MEDIUM6.1Packagist
GHSA-rj9p-8jxj-2ch4· BIT-mediawiki-2020-25812, CVE-2020-25812MediaWiki Cross-site Scripting (XSS) vulnerability
Modified: 5/19/2024
HIGH7.5Packagist
GHSA-rqvj-fc2x-99q6· BIT-mediawiki-2020-25827, CVE-2020-25827OATHAuth extension in MediaWiki is not implementing rate limit
Modified: 5/19/2024
CRITICAL9.8Packagist
GHSA-wrhx-3pxr-6vgg· CVE-2019-12468Wikimedia MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
MEDIUM6.5Packagist
GHSA-x3fr-w7r5-x7rg· CVE-2019-12469MediaWiki Incorrect Access Control vulnerability
Modified: 5/19/2024
MEDIUMPackagist
GHSA-xpv7-93cm-4mxv· BIT-mediawiki-2020-15005, CVE-2020-15005img_auth.php may leak private extension images into the public cache
Modified: 12/2/2024