Security
فارسی
All products

mediawiki/core

Composer · Package
28 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
X-Forwarded-For header allows brute-forcing autoblocked IP addressesCVE-2023-29141 · GHSA-5VJ8-G3QG-4QH6 mediawiki/coreRed Hat OpenShift Container Platform 3.11/mediawiki ComposerRed Hat Critical Fix reported
Cross-site scripting vulnerability in includes/actions/InfoAction.phpCVE-2014-2853 · GHSA-6H86-9R5G-F2H5 mediawiki/core Composer Medium Fix reported
img_auth.php may leak private extension images into the public cacheCVE-2020-15005 · GHSA-XPV7-93CM-4MXV mediawiki/coreRed Hat OpenShift Container Platform 3.11/mediawiki ComposerRed Hat Medium Fix reported
MediaWiki Denial of Service vulnerabilityCVE-2023-45363 · GHSA-W5FX-CX7F-6VR9 mediawiki/core Composer High Fix reported
MediaWiki Incorrect Access Control vulnerabilityCVE-2019-12472 · GHSA-7MQG-5FGH-XH4RVersion ranges need review. mediawiki/core Composer High Fix reported
Possible to circumvent title-blacklistCVE-2019-19709 · GHSA-PJV5-VV93-P648Version ranges need review. mediawiki/core Composer Medium Fix reported
MediaWiki information disclosureCVE-2019-16738 · GHSA-7HWR-F745-5RWQVersion ranges need review. mediawiki/coreRed Hat OpenShift Container Platform 3.10/mediawiki ComposerRed Hat Medium Fix reported
Wikimedia information leak vulnerabilityCVE-2019-12474 · GHSA-2QRR-C2GH-PR35Version ranges need review. mediawiki/core Composer High Fix reported
Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultipleCVE-2019-12473 · GHSA-33XW-X3PR-RVQJVersion ranges need review. mediawiki/core Composer High Fix reported
MediaWiki Cross-site Scripting (XSS)CVE-2019-12471 · GHSA-2RM7-XXX8-35JHVersion ranges need review. mediawiki/core Composer Medium Fix reported
Wikimedia MediaWik exposed suppressed log in RevisionDelete pageCVE-2019-12470 · GHSA-733Q-M38X-Q7CCVersion ranges need review. mediawiki/core Composer Medium Fix reported
MediaWiki Incorrect Access Control vulnerabilityCVE-2019-12469 · GHSA-X3FR-W7R5-X7RGVersion ranges need review. mediawiki/core Composer Medium Fix reported
Wikimedia MediaWiki Incorrect Access Control vulnerabilityCVE-2019-12468 · GHSA-WRHX-3PXR-6VGGVersion ranges need review. mediawiki/core Composer Critical Fix reported
MediaWiki Incorrect Access Control vulnerabilityCVE-2019-12467 · GHSA-6VFG-8PPV-H5HGVersion ranges need review. mediawiki/core Composer Medium Fix reported
Mediawiki tarball is missing .htaccess filesCVE-2018-13258 · GHSA-2C28-7GWV-CPGF mediawiki/core Composer Medium Fix reported
Mediawiki Improper Privilege ManagementCVE-2018-0503 · GHSA-MHFV-9H99-JWG7Version ranges need review. mediawiki/coreRed Hat OpenShift Container Platform 3.6/mediawiki123 ComposerRed Hat Medium Fix reported
Mediawiki BotPassword can bypass CentralAuth's account lockCVE-2018-0505 · GHSA-5C6W-F4W2-2GRPVersion ranges need review. mediawiki/coreRed Hat OpenShift Container Platform 3.6/mediawiki123 ComposerRed Hat Medium Fix reported
Mediawiki information disclosure vulnerabilityCVE-2018-0504 · GHSA-HR8V-F4G2-P66FVersion ranges need review. mediawiki/coreRed Hat OpenShift Container Platform 3.11/mediawiki ComposerRed Hat Medium Fix reported
Wikimedia MediaWiki allows CSRFCVE-2019-12466 · GHSA-27FW-R78J-H898Version ranges need review. mediawiki/core Composer High Fix reported
OATHAuth extension in MediaWiki is not implementing rate limitCVE-2020-25827 · GHSA-RQVJ-FC2X-99Q6Version ranges need review. mediawiki/core Composer High Fix reported