Skip to content
OpenAdvisories
Critical DLA-3540-1 1 CVE

mediawiki - security update

Published Aug 23, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 mediawiki 1:1.31.16-1+deb10u6

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-29141

    X-Forwarded-For header allows brute-forcing autoblocked IP addresses

    An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist