pkg:Packagist/mediawiki/core

All known vulnerabilities

• CRITICAL9.8CVE-2023-29141X-Forwarded-For header allows brute-forcing autoblocked IP addresses
  >= 1.39.0, < 1.39.3
• CRITICAL9.8CVE-2019-12468Wikimedia MediaWiki Incorrect Access Control vulnerability
  >= 1.27.0, < 1.27.6
• HIGH8.8CVE-2019-12466Wikimedia MediaWiki allows CSRF
  >= 1.27.0, < 1.27.6
• HIGH7.5CVE-2023-45363MediaWiki Denial of Service vulnerability
  from 0, < 1.35.12
• HIGH7.5CVE-2020-25827OATHAuth extension in MediaWiki is not implementing rate limit
  >= 1.31.0, < 1.31.9
• HIGH7.5CVE-2019-12474Wikimedia information leak vulnerability
  >= 1.27.0, < 1.27.6
• HIGH7.5CVE-2019-12473Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple
  >= 1.27.0, < 1.27.6
• HIGH7.5CVE-2019-12472MediaWiki Incorrect Access Control vulnerability
  >= 1.18.0, < 1.27.6
• MEDIUM6.5CVE-2019-12470Wikimedia MediaWik exposed suppressed log in RevisionDelete page
  >= 1.27.0, < 1.27.6
• MEDIUM6.5CVE-2019-12469MediaWiki Incorrect Access Control vulnerability
  >= 1.27.0, < 1.27.6
• MEDIUM6.5CVE-2018-0505Mediawiki BotPassword can bypass CentralAuth's account lock
  >= 1.27.0, < 1.27.5
• MEDIUM6.5CVE-2018-0504Mediawiki information disclosure vulnerability
  >= 1.27.0, < 1.27.5
• MEDIUM6.1CVE-2020-25814MediaWiki Cross-site Scripting (XSS) vulnerability
  >= 1.31.0, < 1.31.9
• MEDIUM6.1CVE-2020-25815MediaWiki Cross-site Scripting (XSS) vulnerability
  >= 1.32.0, < 1.34.3
• MEDIUM6.1CVE-2020-25828MediaWiki Cross-site Scripting (XSS) vulnerability
  >= 1.31.0, < 1.31.9
• MEDIUM6.1CVE-2020-25812MediaWiki Cross-site Scripting (XSS) vulnerability
  >= 1.34.0, < 1.34.3
• MEDIUM6.1CVE-2020-10959MediaWiki Open Redirect vulnerability
  from 0, < 1.34.0-rc.0
• MEDIUM6.1CVE-2019-19709Possible to circumvent title-blacklist
  >= 1.31.0, < 1.31.6
• MEDIUM6.1CVE-2019-12471MediaWiki Cross-site Scripting (XSS)
  >= 1.27.0, < 1.27.6
• MEDIUM5.3CVE-2021-41800MediaWiki allows a denial of service
  from 0, < 1.36.2
• MEDIUM5.3CVE-2020-25813MediaWiki Special:UserRights exposes the existence of hidden users
  >= 1.31.0, < 1.31.9
• MEDIUM5.3CVE-2020-10960MediaWiki makeCollapsible allows applying event handler to any CSS selector
  >= 1.31.0, < 1.31.7
• MEDIUM5.3CVE-2019-16738MediaWiki information disclosure
  >= 1.31.0, < 1.31.4
• MEDIUM5.3CVE-2019-12467MediaWiki Incorrect Access Control vulnerability
  from 0, < 1.27.6
• MEDIUM5.3CVE-2018-13258Mediawiki tarball is missing .htaccess files
  >= 1.31.0, < 1.31.1
• MEDIUM4.3CVE-2018-0503Mediawiki Improper Privilege Management
  >= 1.27.0, < 1.27.5
• LOW3.1CVE-2020-15005mediawiki - security update
  from 0, < 1.31.8
• —CVE-2014-2853Cross-site scripting vulnerability in includes/actions/InfoAction.php
  from 0, < 1.21.9