Skip to content
OpenAdvisories
Medium WID-SEC-2024-1540 10 CVEs

MediaWiki: Mehrere Schwachstellen

Published Jul 7, 2024 · Updated Jul 9, 2024 · Revision 2 · de-DE

Platform: Linux Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder Cross-Site Request Forgery-Angriffe auszuführen.

Product

MediaWiki ist ein freies Wiki, das ursprünglich für den Einsatz auf Wikipedia entwickelt wurde.

Vulnerabilities 10

  • High 7.5
    CVE-2024-40597

    An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information f…

  • Medium 6.3
    CVE-2024-40601

    An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules.

  • Medium 6.1
    CVE-2024-40600

    An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar t…

  • Medium 6.1
    CVE-2024-40602

    An issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-l…

  • Medium 4.8
    CVE-2024-40599

    An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top…

  • Medium 4.8
    CVE-2024-40604

    An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sideb…

  • Medium 4.8
    CVE-2024-40605

    An issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar …

  • Medium 4.3
    CVE-2024-40596

    An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can ex…

  • Medium 4.3
    CVE-2024-40598

    An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed informat…

  • Medium 4.3
    CVE-2024-40603

    An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF …

Revision history

  1. #2

    Neue Updates aufgenommen

  2. #1

    Initiale Fassung

References