Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (4)
| Vulnerability |
Summary |
Aliases |
|
VCID-2xja-2whv-fqe4
|
mediawiki: diff-multi-sameuser ("X intermediate revisions by the same user not shown") ignores username suppression
|
CVE-2023-45362
|
|
VCID-ea7c-xk4h-13fs
|
mediawiki: stored XSS leads to privilege escalation
|
CVE-2023-3550
|
|
VCID-jm7q-2w3j-buhh
|
MediaWiki Denial of Service vulnerability
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.
|
CVE-2023-45363
GHSA-w5fx-cx7f-6vr9
|
|
VCID-zj5a-p9u4-ducw
|
mediawiki: XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages
|
CVE-2023-45360
|