mediawiki - security update

Fixed packages 2

Vulnerabilities 4

• High 7.5
  CVE-2023-45363 EPSS 24%

  MediaWiki Denial of Service vulnerability

  An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected …

  mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  Oct 9, 2023
• High 7.3
  CVE-2023-3550

  Stored XSS leads to privilege escalation in MediaWiki v1.40.0

  Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious lin…

  mediawiki mediawiki mediawiki mediawiki Web / CMS Debian Ubuntu
  Sep 25, 2023
• Medium 5.4
  CVE-2023-45360

  An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. The…

  mediawiki mediawiki Debian Ubuntu
  Nov 3, 2023
• Unscored —
  CVE-2023-45362

  An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1…

  mediawiki mediawiki Debian Ubuntu
  Nov 3, 2023