Skip to content
OpenAdvisories

Package · Debian

mediawiki

285 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-29141

    X-Forwarded-For header allows brute-forcing autoblocked IP addresses

    An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist
  • Critical 9.8
    CVE-2019-12468

    Wikimedia MediaWiki Incorrect Access Control vulnerability

    An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.

    mediawiki mediawiki mediawiki/core Debian Ubuntu Packagist