Medium DLA-3117-1 6 CVEs

mediawiki - security update

Published Sep 22, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	mediawiki	1:1.31.16-1+deb10u3

Vulnerabilities 6

Medium 5.3

CVE-2021-44856

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by …

mediawiki mediawiki Debian Ubuntu

Dec 26, 2022
Unscored —

CVE-2022-28201

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the edit…

mediawiki mediawiki Debian Ubuntu

Sep 19, 2022
Unscored —

CVE-2022-28202

An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight…

mediawiki mediawiki Debian Ubuntu

Mar 30, 2022
Unscored —

CVE-2022-28203

A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Wh…

mediawiki mediawiki Debian Ubuntu

Sep 19, 2022
Unscored —

CVE-2022-34911

An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can …

mediawiki mediawiki Debian Ubuntu

Jul 2, 2022
Unscored —

CVE-2022-34912

An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:C…

mediawiki mediawiki Debian Ubuntu

Jul 2, 2022