mediawiki/core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-45363Highmediawiki/core: MediaWiki Denial of Service vulnerability CVE-2023-29141Criticalmediawiki/core: X-Forwarded-For header allows brute-forcing autoblocked IP addresses CVE-2021-41800Mediummediawiki/core: MediaWiki allows a denial of service CVE-2020-25815Mediummediawiki/core: MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-25813Mediummediawiki/core: MediaWiki Special:UserRights exposes the existence of hidden users CVE-2020-25827Highmediawiki/core: OATHAuth extension in MediaWiki is not implementing rate limit CVE-2020-25828Mediummediawiki/core: MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-25814Mediummediawiki/core: MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-25812Mediummediawiki/core: MediaWiki Cross-site Scripting (XSS) vulnerability CVE-2020-15005Mediummediawiki/core: img_auth.php may leak private extension images into the public cache CVE-2020-10959Mediummediawiki/core: MediaWiki Open Redirect vulnerability CVE-2020-10960Mediummediawiki/core: MediaWiki makeCollapsible allows applying event handler to any CSS selector CVE-2019-19709Mediummediawiki/core: Possible to circumvent title-blacklist CVE-2019-16738Mediummediawiki/core: MediaWiki information disclosure CVE-2019-12474Highmediawiki/core: Wikimedia information leak vulnerability CVE-2019-12470Mediummediawiki/core: Wikimedia MediaWik exposed suppressed log in RevisionDelete page CVE-2019-12469Mediummediawiki/core: MediaWiki Incorrect Access Control vulnerability CVE-2019-12471Mediummediawiki/core: MediaWiki Cross-site Scripting (XSS)CVE-2019-12472Highmediawiki/core: MediaWiki Incorrect Access Control vulnerability CVE-2019-12473Highmediawiki/core: Wikimedia Potential DOS due to slow WatchedItemStore::countVisitingWatchersMultiple CVE-2019-12466Highmediawiki/core: Wikimedia MediaWiki allows CSRF CVE-2019-12467Mediummediawiki/core: MediaWiki Incorrect Access Control vulnerability CVE-2019-12468Criticalmediawiki/core: Wikimedia MediaWiki Incorrect Access Control vulnerability CVE-2014-2853Mediummediawiki/core: Cross-site scripting vulnerability in includes/actions/InfoAction.php CVE-2018-13258Mediummediawiki/core: Mediawiki tarball is missing .htaccess files

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo