VulnerableCode Package Details - pkg:composer/mediawiki/core@1.27.5

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:composer/mediawiki/core@1.27.5

Essentials
History (73)

purl	pkg:composer/mediawiki/core@1.27.5

Next non-vulnerable version	1.35.12
Latest non-vulnerable version	1.40.1
Risk	4.5

Vulnerabilities affecting this package (14)

Vulnerability	Summary	Fixed by
VCID-1697-p35n-fber Aliases: CVE-2019-12466 GHSA-27fw-r78j-h898	Wikimedia MediaWiki allows CSRF Wikimedia MediaWiki through 1.32.1 allows CSRF in logout feature.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-1866-gt2g-1qfv Aliases: CVE-2019-12469 GHSA-x3fr-w7r5-x7rg	MediaWiki Incorrect Access Control vulnerability MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-7eba-7gsc-hbfg Aliases: CVE-2023-29141 GHSA-5vj8-g3qg-4qh6	X-Forwarded-For header allows brute-forcing autoblocked IP addresses An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.	1.35.10 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.38.6 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 1.39.3 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-9qyu-z71g-1qbq Aliases: CVE-2020-10959 GHSA-mqhw-wq8p-vf5r	MediaWiki Open Redirect vulnerability resources/src/mediawiki.page.ready/ready.js in MediaWiki before 1.34.0-rc.0 allows remote attackers to force a logout and external redirection via HTML content in a MediaWiki page.	1.34.0-rc.0 Affected by 9 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-bbef-akjp-a3gp Aliases: CVE-2019-12473 GHSA-33xw-x3pr-rvqj	Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-gma6-b9cy-kqee Aliases: CVE-2019-12467 GHSA-6vfg-8ppv-h5hg	MediaWiki Incorrect Access Control vulnerability MediaWiki through 1.32.1 has Incorrect Access Control (issue 1 of 3). A spammer can use Special:ChangeEmail to send out spam with no rate limiting or ability to block them. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-jm7q-2w3j-buhh Aliases: CVE-2023-45363 GHSA-w5fx-cx7f-6vr9	MediaWiki Denial of Service vulnerability An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.	1.35.12 Affected by 0 other vulnerabilities. 1.39.5 Affected by 0 other vulnerabilities. 1.40.1 Affected by 0 other vulnerabilities.
VCID-kjp3-cs2f-t7b4 Aliases: CVE-2019-12471 GHSA-2rm7-xxx8-35jh	MediaWiki Cross-site Scripting (XSS) Wikimedia MediaWiki 1.30.0 through 1.32.1 has XSS. Loading user JavaScript from a non-existent account allows anyone to create the account, and perform XSS on users loading that script. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-qmx3-kcnd-zuhe Aliases: CVE-2019-12468 GHSA-wrhx-3pxr-6vgg	Wikimedia MediaWiki Incorrect Access Control vulnerability An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.27.0 through 1.32.1. Directly POSTing to Special:ChangeEmail would allow for bypassing re-authentication, allowing for potential account takeover.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-tq2e-c9ym-a3hj Aliases: CVE-2019-12474 GHSA-2qrr-c2gh-pr35	Wikimedia information leak vulnerability Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cached publicly. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-u2xc-ztge-p3bv Aliases: CVE-2019-12472 GHSA-7mqg-5fgh-xh4r	MediaWiki Incorrect Access Control vulnerability An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks ($wgBlockCIDRLimit) by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-yr8d-347g-pugg Aliases: CVE-2019-12470 GHSA-733q-m38x-q7cc	Wikimedia MediaWik exposed suppressed log in RevisionDelete page Wikimedia MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed log in RevisionDelete page is exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.	1.27.6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.30.2 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.31.2 Affected by 11 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.32.2 Affected by 12 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-z9d9-aer5-gfa9 Aliases: CVE-2021-41800 GHSA-c8wv-qwwc-6j73	Multiple vulnerabilities have been found in MediaWiki, the worst of which could result in denial of service.	1.36.2 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-zgdf-mxfn-gbea Aliases: CVE-2020-15005 GHSA-xpv7-93cm-4mxv	img_auth.php may leak private extension images into the public cache In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had their files cached publicly, so any unauthorized user could view them. This occurs because Cache-Control and Vary headers were mishandled.	1.31.8 Affected by 8 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.33.4 Affected by 9 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.34.2 Affected by 9 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (3)

Vulnerability	Summary	Aliases
VCID-sf61-byhw-17gv	Mediawiki Improper Privilege Management Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.	CVE-2018-0503 GHSA-mhfv-9h99-jwg7
VCID-v27j-4pnt-n7h9	Mediawiki BotPassword can bypass CentralAuth's account lock Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock	CVE-2018-0505 GHSA-5c6w-f4w2-2grp
VCID-w3f8-nrqd-p7gq	Mediawiki information disclosure vulnerability Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid	CVE-2018-0504 GHSA-hr8v-f4g2-p66f

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-16T22:40:13.251329+00:00	GitLab Importer	Affected by	VCID-jm7q-2w3j-buhh	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2023-45363.yml	38.4.0
2026-04-16T22:26:02.068076+00:00	GitLab Importer	Affected by	VCID-7eba-7gsc-hbfg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2023-29141.yml	38.4.0
2026-04-16T22:01:07.339022+00:00	GitLab Importer	Affected by	VCID-u2xc-ztge-p3bv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12472.yml	38.4.0
2026-04-16T22:00:22.372517+00:00	GitLab Importer	Affected by	VCID-9qyu-z71g-1qbq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-10959.yml	38.4.0
2026-04-16T22:00:00.301017+00:00	GitLab Importer	Affected by	VCID-kjp3-cs2f-t7b4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12471.yml	38.4.0
2026-04-16T21:59:57.754662+00:00	GitLab Importer	Affected by	VCID-tq2e-c9ym-a3hj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12474.yml	38.4.0
2026-04-16T21:59:43.569108+00:00	GitLab Importer	Affected by	VCID-bbef-akjp-a3gp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12473.yml	38.4.0
2026-04-16T21:59:41.534210+00:00	GitLab Importer	Affected by	VCID-qmx3-kcnd-zuhe	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12468.yml	38.4.0
2026-04-16T21:59:04.532012+00:00	GitLab Importer	Affected by	VCID-zgdf-mxfn-gbea	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-15005.yml	38.4.0
2026-04-16T21:58:35.451363+00:00	GitLab Importer	Affected by	VCID-1697-p35n-fber	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12466.yml	38.4.0
2026-04-16T21:57:14.780546+00:00	GitLab Importer	Affected by	VCID-1866-gt2g-1qfv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12469.yml	38.4.0
2026-04-16T21:57:04.344430+00:00	GitLab Importer	Affected by	VCID-yr8d-347g-pugg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12470.yml	38.4.0
2026-04-16T21:56:45.008950+00:00	GitLab Importer	Affected by	VCID-gma6-b9cy-kqee	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12467.yml	38.4.0
2026-04-16T21:55:56.571751+00:00	GitLab Importer	Affected by	VCID-z9d9-aer5-gfa9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2021-41800.yml	38.4.0
2026-04-16T21:48:26.475092+00:00	GitLab Importer	Fixing	VCID-w3f8-nrqd-p7gq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0504.yml	38.4.0
2026-04-16T21:48:04.402591+00:00	GitLab Importer	Fixing	VCID-sf61-byhw-17gv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0503.yml	38.4.0
2026-04-16T21:47:24.566358+00:00	GitLab Importer	Fixing	VCID-v27j-4pnt-n7h9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0505.yml	38.4.0
2026-04-11T23:59:40.452544+00:00	GitLab Importer	Affected by	VCID-jm7q-2w3j-buhh	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2023-45363.yml	38.3.0
2026-04-11T23:44:18.097464+00:00	GitLab Importer	Affected by	VCID-7eba-7gsc-hbfg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2023-29141.yml	38.3.0
2026-04-11T23:16:43.616817+00:00	GitLab Importer	Affected by	VCID-u2xc-ztge-p3bv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12472.yml	38.3.0
2026-04-11T23:15:58.761010+00:00	GitLab Importer	Affected by	VCID-9qyu-z71g-1qbq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-10959.yml	38.3.0
2026-04-11T23:15:35.788993+00:00	GitLab Importer	Affected by	VCID-kjp3-cs2f-t7b4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12471.yml	38.3.0
2026-04-11T23:15:33.016963+00:00	GitLab Importer	Affected by	VCID-tq2e-c9ym-a3hj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12474.yml	38.3.0
2026-04-11T23:15:17.481778+00:00	GitLab Importer	Affected by	VCID-bbef-akjp-a3gp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12473.yml	38.3.0
2026-04-11T23:15:15.055592+00:00	GitLab Importer	Affected by	VCID-qmx3-kcnd-zuhe	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12468.yml	38.3.0
2026-04-11T23:14:34.630510+00:00	GitLab Importer	Affected by	VCID-zgdf-mxfn-gbea	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-15005.yml	38.3.0
2026-04-11T23:14:04.804799+00:00	GitLab Importer	Affected by	VCID-1697-p35n-fber	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12466.yml	38.3.0
2026-04-11T23:12:40.075269+00:00	GitLab Importer	Affected by	VCID-1866-gt2g-1qfv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12469.yml	38.3.0
2026-04-11T23:12:28.492147+00:00	GitLab Importer	Affected by	VCID-yr8d-347g-pugg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12470.yml	38.3.0
2026-04-11T23:12:07.749204+00:00	GitLab Importer	Affected by	VCID-gma6-b9cy-kqee	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12467.yml	38.3.0
2026-04-11T23:11:20.593604+00:00	GitLab Importer	Affected by	VCID-z9d9-aer5-gfa9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2021-41800.yml	38.3.0
2026-04-11T23:04:20.455288+00:00	GitLab Importer	Fixing	VCID-w3f8-nrqd-p7gq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0504.yml	38.3.0
2026-04-11T23:03:57.661554+00:00	GitLab Importer	Fixing	VCID-sf61-byhw-17gv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0503.yml	38.3.0
2026-04-11T23:03:14.433458+00:00	GitLab Importer	Fixing	VCID-v27j-4pnt-n7h9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0505.yml	38.3.0
2026-04-03T00:02:44.086923+00:00	GitLab Importer	Affected by	VCID-jm7q-2w3j-buhh	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2023-45363.yml	38.1.0
2026-04-02T23:47:56.756136+00:00	GitLab Importer	Affected by	VCID-7eba-7gsc-hbfg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2023-29141.yml	38.1.0
2026-04-02T23:24:32.347808+00:00	GitLab Importer	Affected by	VCID-u2xc-ztge-p3bv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12472.yml	38.1.0
2026-04-02T23:23:48.598191+00:00	GitLab Importer	Affected by	VCID-9qyu-z71g-1qbq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-10959.yml	38.1.0
2026-04-02T23:23:28.495476+00:00	GitLab Importer	Affected by	VCID-kjp3-cs2f-t7b4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12471.yml	38.1.0
2026-04-02T23:23:25.979044+00:00	GitLab Importer	Affected by	VCID-tq2e-c9ym-a3hj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12474.yml	38.1.0
2026-04-02T23:23:11.969156+00:00	GitLab Importer	Affected by	VCID-bbef-akjp-a3gp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12473.yml	38.1.0
2026-04-02T23:23:10.099112+00:00	GitLab Importer	Affected by	VCID-qmx3-kcnd-zuhe	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12468.yml	38.1.0
2026-04-02T23:22:36.709016+00:00	GitLab Importer	Affected by	VCID-zgdf-mxfn-gbea	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-15005.yml	38.1.0
2026-04-02T23:22:10.764104+00:00	GitLab Importer	Affected by	VCID-1697-p35n-fber	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12466.yml	38.1.0
2026-04-02T23:20:57.453026+00:00	GitLab Importer	Affected by	VCID-1866-gt2g-1qfv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12469.yml	38.1.0
2026-04-02T23:20:47.991726+00:00	GitLab Importer	Affected by	VCID-yr8d-347g-pugg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12470.yml	38.1.0
2026-04-02T23:20:30.428638+00:00	GitLab Importer	Affected by	VCID-gma6-b9cy-kqee	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12467.yml	38.1.0
2026-04-02T23:19:48.725972+00:00	GitLab Importer	Affected by	VCID-z9d9-aer5-gfa9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2021-41800.yml	38.1.0
2026-04-02T23:12:41.555910+00:00	GitLab Importer	Fixing	VCID-w3f8-nrqd-p7gq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0504.yml	38.1.0
2026-04-02T23:12:18.917091+00:00	GitLab Importer	Fixing	VCID-sf61-byhw-17gv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0503.yml	38.1.0
2026-04-02T23:11:37.789208+00:00	GitLab Importer	Fixing	VCID-v27j-4pnt-n7h9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0505.yml	38.1.0
2026-04-01T18:11:15.846436+00:00	GitLab Importer	Affected by	VCID-7eba-7gsc-hbfg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2023-29141.yml	38.0.0
2026-04-01T17:45:20.764356+00:00	GitLab Importer	Affected by	VCID-u2xc-ztge-p3bv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12472.yml	38.0.0
2026-04-01T17:44:47.994043+00:00	GitLab Importer	Affected by	VCID-9qyu-z71g-1qbq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-10959.yml	38.0.0
2026-04-01T17:44:29.379895+00:00	GitLab Importer	Affected by	VCID-kjp3-cs2f-t7b4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12471.yml	38.0.0
2026-04-01T17:44:27.691738+00:00	GitLab Importer	Affected by	VCID-tq2e-c9ym-a3hj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12474.yml	38.0.0
2026-04-01T17:44:15.201748+00:00	GitLab Importer	Affected by	VCID-bbef-akjp-a3gp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12473.yml	38.0.0
2026-04-01T17:44:13.309832+00:00	GitLab Importer	Affected by	VCID-qmx3-kcnd-zuhe	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12468.yml	38.0.0
2026-04-01T17:43:36.883292+00:00	GitLab Importer	Affected by	VCID-zgdf-mxfn-gbea	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2020-15005.yml	38.0.0
2026-04-01T17:43:07.276777+00:00	GitLab Importer	Affected by	VCID-1697-p35n-fber	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12466.yml	38.0.0
2026-04-01T17:41:39.761404+00:00	GitLab Importer	Affected by	VCID-1866-gt2g-1qfv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12469.yml	38.0.0
2026-04-01T17:41:28.054039+00:00	GitLab Importer	Affected by	VCID-yr8d-347g-pugg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12470.yml	38.0.0
2026-04-01T17:41:07.098439+00:00	GitLab Importer	Affected by	VCID-gma6-b9cy-kqee	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2019-12467.yml	38.0.0
2026-04-01T17:40:20.720586+00:00	GitLab Importer	Affected by	VCID-z9d9-aer5-gfa9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2021-41800.yml	38.0.0
2026-04-01T16:01:33.504068+00:00	GHSA Importer	Fixing	VCID-sf61-byhw-17gv	https://github.com/advisories/GHSA-mhfv-9h99-jwg7	38.0.0
2026-04-01T16:01:33.263096+00:00	GHSA Importer	Fixing	VCID-v27j-4pnt-n7h9	https://github.com/advisories/GHSA-5c6w-f4w2-2grp	38.0.0
2026-04-01T16:01:33.094706+00:00	GHSA Importer	Fixing	VCID-w3f8-nrqd-p7gq	https://github.com/advisories/GHSA-hr8v-f4g2-p66f	38.0.0
2026-04-01T13:11:54.133206+00:00	GithubOSV Importer	Fixing	VCID-sf61-byhw-17gv	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mhfv-9h99-jwg7/GHSA-mhfv-9h99-jwg7.json	38.0.0
2026-04-01T13:11:08.677564+00:00	GithubOSV Importer	Fixing	VCID-v27j-4pnt-n7h9	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5c6w-f4w2-2grp/GHSA-5c6w-f4w2-2grp.json	38.0.0
2026-04-01T13:07:56.140515+00:00	GithubOSV Importer	Fixing	VCID-w3f8-nrqd-p7gq	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-hr8v-f4g2-p66f/GHSA-hr8v-f4g2-p66f.json	38.0.0
2026-04-01T12:50:14.387980+00:00	GitLab Importer	Fixing	VCID-w3f8-nrqd-p7gq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0504.yml	38.0.0
2026-04-01T12:50:11.801503+00:00	GitLab Importer	Fixing	VCID-sf61-byhw-17gv	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0503.yml	38.0.0
2026-04-01T12:50:07.106767+00:00	GitLab Importer	Fixing	VCID-v27j-4pnt-n7h9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mediawiki/core/CVE-2018-0505.yml	38.0.0