Skip to content
OpenAdvisories
High WID-SEC-2024-1022 4 CVEs

MediaWiki: Mehrere Schwachstellen

Published May 5, 2024 · Updated May 5, 2024 · de-DE

Platform: Linux

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.

Product

MediaWiki ist ein freies Wiki, das ursprünglich für den Einsatz auf Wikipedia entwickelt wurde.

Vulnerabilities 4

  • Critical 9.8
    CVE-2024-34502

    An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. L…

  • High 7.5
    CVE-2024-34506

    An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and …

    mediawiki mediawiki Debian Ubuntu
  • High 7.4
    CVE-2024-34507

    An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3…

    mediawiki mediawiki Debian Ubuntu
  • Medium 6.1
    CVE-2024-34500

    MediaWiki UnlinkedWikibase Cross-site Scripting vulnerability

    An issue was discovered in the UnlinkedWikibase extension in MediaWiki before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. XSS can occur through an interface message. Error messages (in the $err var) are not escaped before being passed to Html::raw…

    samwilson/unlinked-wikibase Packagist

Revision history

  1. #1

    Initiale Fassung

References