Skip to content
OpenAdvisories
High DLA-3671-1 3 CVEs

mediawiki - security update

Published Nov 28, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 mediawiki 1:1.31.16-1+deb10u7

Vulnerabilities 3

  • High 7.5
    CVE-2023-45363 EPSS 24%

    MediaWiki Denial of Service vulnerability

    An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected …

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  • High 7.3
    CVE-2023-3550

    Stored XSS leads to privilege escalation in MediaWiki v1.40.0

    Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious lin…

    mediawiki mediawiki mediawiki mediawiki Web / CMS Debian Ubuntu
  • Unscored —
    CVE-2023-45362

    An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1…

    mediawiki mediawiki Debian Ubuntu