Skip to content
OpenAdvisories
High WID-SEC-2024-3087 11 CVEs

MediaWiki: Mehrere Schwachstellen

Published Oct 6, 2024 · Updated Jan 19, 2025 · Revision 4 · de-DE

Vendor: Debian Vendor: Fedora Vendor: Ubuntu Product: Linux Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder Dateien zu manipulieren.

Product

MediaWiki ist ein freies Wiki, das ursprünglich für den Einsatz auf Wikipedia entwickelt wurde.

Vulnerabilities 11

  • High 8.8
    CVE-2024-45048

    XML External Entity Reference (XXE) in PHPSpreadsheet

    PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypassing of a filter which allows for an XXE-attack. This in turn allows attacker to obtain contents of local files, even if error reporting is…

    PHPOffice PhpSpreadsheet phpoffice/phpspreadsheet phpoffice/phpexcel Packagist
  • High 8.8
    CVE-2024-47849

    Backticks can allow the usage of not-allowed SQL functions

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Injection.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.

    The Wikimedia Foundation Mediawiki - Cargo Web / CMS
  • High 7.3
    CVE-2024-35226

    PHP Code Injection by malicious attribute in extends-tag in Smarty

    Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In affected versions template authors could inject php code by choosing a malicious file name for an extends-tag. Sites that cannot fully trust…

    smarty-php smarty smarty3 smarty/smarty Debian Ubuntu Packagist
  • Medium 6.9
    CVE-2024-47840

    Stored XSS through sidebar in Apex skin

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Apex skin allows Stored XSS.This issue affects Mediawiki - Apex skin: from 1.39.X before 1.39.9, from 1.41.X befo…

    The Wikimedia Foundation Mediawiki - Apex skin Web / CMS
  • Medium 6.9
    CVE-2024-47841 EPSS 35%

    Path traversal when loading stylesheets

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Path Traversal.This issue affects Mediawiki - CSS Extension: from 1.42.X before 1.42.2, from 1.41.X befor…

    The Wikimedia Foundation Mediawiki - CSS Extension Web / CMS
  • Medium 6.9
    CVE-2024-47845

    CSS sanitizer used incorrectly, and is easily bypassed

    Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.

    The Wikimedia Foundation Mediawiki - CSS Extension Web / CMS
  • Medium 6.9
    CVE-2024-47846

    Special:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protection

    Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.

    The Wikimedia Foundation Mediawiki - Cargo Web / CMS
  • Medium 6.9
    CVE-2024-47847

    Various XSSes found in Cargo

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.

    The Wikimedia Foundation Mediawiki - Cargo mediawiki/cargo Web / CMS Packagist
  • Medium 6.9
    CVE-2024-47848

    User can review/unreview articles while blocked

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - PageTriage allows Authentication Bypass.This issue affects Mediawiki - PageTriage: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42…

    The Wikimedia Foundation Mediawiki - PageTriage Web / CMS
  • Medium 5.4
    CVE-2024-45046

    PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via style information

    PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpreadsheet\Writer\Html` doesn't sanitize spreadsheet styling information such as font names, allowing an attacker to inject arbitrary JavaScri…

    PHPOffice PhpSpreadsheet phpoffice/phpspreadsheet phpoffice/phpexcel Packagist
  • Medium 5.3
    CVE-2024-47913

    Improper permissions handling in MediaWiki AbuseFilter

    An issue was discovered in the AbuseFilter extension for MediaWiki before 1.39.9, 1.40.x and 1.41.x before 1.41.3, and 1.42.x before 1.42.2. An API caller can match a filter condition against AbuseFilter logs even if the caller is not authorized to view the l…

    mediawiki mediawiki mediawiki/abuse-filter Debian Ubuntu Packagist

Revision history

  1. #4

    Neue Updates von Fedora aufgenommen

  2. #3

    Neue Updates von Debian und Ubuntu aufgenommen

  3. #2

    Neue Updates von Debian aufgenommen

  4. #1

    Initiale Fassung

References