Show filters
373 Total Results
Displaying 71-80 of 373
Sort by:
Attacker Value
Unknown
CVE-2022-41765
Disclosure Date: December 26, 2022 (last updated October 08, 2023)
An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. HTMLUserTextField exposes the existence of hidden users.
0
Attacker Value
Unknown
CVE-2021-44856
Disclosure Date: December 26, 2022 (last updated October 08, 2023)
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A title blocked by AbuseFilter can be created via Special:ChangeContentModel due to the mishandling of the EditFilterMergedContent hook return value.
0
Attacker Value
Unknown
CVE-2021-44855
Disclosure Date: December 26, 2022 (last updated October 08, 2023)
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. There is Blind Stored XSS via a URL to the Upload Image feature.
0
Attacker Value
Unknown
CVE-2021-44854
Disclosure Date: December 26, 2022 (last updated October 08, 2023)
An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results from private wikis.
0
Attacker Value
Unknown
CVE-2021-42049
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.
0
Attacker Value
Unknown
CVE-2021-42048
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
An issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add arbitrary JavaScript code to the Newcomer home page footer, which can be executed by viewers with zero edits.
0
Attacker Value
Unknown
CVE-2021-42047
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
An issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the Mentor Dashboard feature enabled, users can login with a mentor account and trigger an XSS payload (such as alert) via Growthexperiments-mentor-dashboard-mentee-overview-no-js-fallback.
0
Attacker Value
Unknown
CVE-2021-42046
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escaped and allowed for users to inject HTML and JavaScript.
0
Attacker Value
Unknown
CVE-2021-42045
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote.
0
Attacker Value
Unknown
CVE-2022-28204
Disclosure Date: September 19, 2022 (last updated October 08, 2023)
A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk.
0
