Debian Mediawiki vulnerabilities

CVE-2025-61634 [NONE] CVE-2025-61634: mediawiki - Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associate... Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handler/PageHTMLHandler.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 1:1.43.5+dfsg-1) sid: resolved (fixed in 1:1.43.5+dfsg-1) trixie: resolved (

CVE-2026-5266 [LOW] CVE-2026-5266: mediawiki bookworm: resolved bullseye: resolved forky: resolved (fixed in 1:1.43.8+dfsg-1) sid: resolved (fixed in 1:1.43.8+dfsg-1) trixie: open

CVE-2025-61657 [NONE] CVE-2025-61657: mediawiki - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site ... Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Vector. This vulnerability is associated with program files resources/skins.Vector.Js/stickyHeader.Js. This issue affects Vector: from * before 1.43.4, 1.44.1. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in

CVE-2025-32700 [LOW] CVE-2025-32700: mediawiki - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiki... Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseLog.Php, includes/Pager/AbuseLogPager.Php, includes/Special/SpecialAbuseLog.Php, includes/View/AbuseFilterViewExamine.Php. This issue affects AbuseFilter: from >= 1.43.0 before 1.43.

CVE-2025-6589 [LOW] CVE-2025-6589: mediawiki - Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associate... Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: >= 1.42.0. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 1:1.43.3+dfsg-1) sid: resolved (fixed in 1:1.43.3+dfsg-1) trixie: resolved (fixed in 1:1.43.3+dfsg-1)

CVE-2025-32698 [LOW] CVE-2025-32698: mediawiki - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wiki... Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1. Scope: local bookworm: resolved (fixed in 1:1.39.12-1~deb12u1) bullseye: resolved (fixed in 1:1.35.13-1+deb11u4) f

CVE-2025-6592 [LOW] CVE-2025-6592: mediawiki - Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associa... Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 1:1.43.3+dfsg-1) sid: resolved (fixed in 1:1.43.3+dfsg-1)

CVE-2010-2788 [LOW] CVE-2010-2788: mediawiki - Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before ... Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Scope: local bookworm: resolved (fixed in 1:1.15.5-1) bullseye: resolved (fixed in 1:1.15.5-1) forky: resolved (fixed in 1:1.15.5-1) sid: resolved (fixed i

CVE-2009-0737 [LOW] CVE-2009-0737: mediawiki - Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (... Multiple cross-site scripting (XSS) vulnerabilities in the web-based installer (config/index.php) in MediaWiki 1.6 before 1.6.12, 1.12 before 1.12.4, and 1.13 before 1.13.4, when the installer is in active use, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Scope: local bookworm: resolved (fixed in 1:1.14.0-1) bullseye: resolve

CVE-2025-61652 [LOW] CVE-2025-61652: mediawiki - Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects Discuss... Vulnerability in Wikimedia Foundation DiscussionTools.This issue affects DiscussionTools: from * before 1.43.4, 1.44.1. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 1:1.43.5+dfsg-1) sid: resolved (fixed in 1:1.43.5+dfsg-1) trixie: resolved (fixed in 1:1.43.6+dfsg-1~deb13u1)

CVE-2025-32699 [LOW] CVE-2025-32699: mediawiki - Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.Th... Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2. Scope: local bookworm: resolved (fixed in 1:1.39.12-1~deb12u1) bullseye: resolved (fixed in 1:1.35.13-1+deb11u4) forky: resolved (fixed in 1:1.43.1+dfsg-1) sid: resolved (fixed in 1:1.43.

CVE-2007-0894 [MEDIUM] CVE-2007-0894: mediawiki - MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information v... MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.php, (2) MonoBook.deps.php, (3) MySkin.deps.php, or (4) Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message. Scope: local bookworm: resolved (fixed in 1:1.10) bullseye: resolved (fixed in 1:1.10) forky: r

CVE-2026-34086 CVE-2026-34086: mediawiki bookworm: open bullseye: open forky: resolved (fixed in 1:1.43.8+dfsg-1) sid: resolved (fixed in 1:1.43.8+dfsg-1) trixie: open

CVE-2019-12466 [HIGH] CVE-2019-12466: mediawiki - Wikimedia MediaWiki through 1.32.1 allows CSRF. Wikimedia MediaWiki through 1.32.1 allows CSRF. Scope: local bookworm: resolved (fixed in 1:1.31.2-1) bullseye: resolved (fixed in 1:1.31.2-1) forky: resolved (fixed in 1:1.31.2-1) sid: resolved (fixed in 1:1.31.2-1) trixie: resolved (fixed in 1:1.31.2-1)

CVE-2012-0046 [HIGH] CVE-2012-0046: mediawiki - mediawiki allows deleted text to be exposed mediawiki allows deleted text to be exposed Scope: local bookworm: resolved (fixed in 1:1.15.5-6) bullseye: resolved (fixed in 1:1.15.5-6) forky: resolved (fixed in 1:1.15.5-6) sid: resolved (fixed in 1:1.15.5-6) trixie: resolved (fixed in 1:1.15.5-6)