Debian Mediawiki vulnerabilities

CVE-2013-4303 [MEDIUM] CVE-2013-4303: mediawiki - includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before... includes/libs/IEUrlExtension.php in the MediaWiki API in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 does not properly detect extensions when there are an even number of "." (period) characters in a string, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the siprop parameter in a query action to wi

CVE-2025-61641 [LOW] CVE-2025-61641: mediawiki - Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associate... Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Scope: local bookworm: resolved (fixed in 1:1.39.17-1~deb12u1) bullseye: resolved (fixed in 1:1.35.13-1+deb11u5) forky: resolved (fixed in 1:1.43.5+dfsg-1) sid: r

CVE-2015-2942 [HIGH] CVE-2015-2942: mediawiki - MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when usi... MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity references in an (1) SVG file or (2) XMP metadata in a PDF file, aka a "billion laughs attack," a different vulnerability than CVE-2015-2937. Scope: local bookwo

CVE-2015-8002 [MEDIUM] CVE-2015-8002: mediawiki - The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.... The chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 allows remote authenticated users to cause a denial of service (disk consumption) via a file upload using one byte chunks. Scope: local bookworm: resolved (fixed in 1:1.25.5-1) bullseye: resolved (fixed in 1:1.25.5-1) forky: resolved (fixed in 1:1.25.5-1)

CVE-2014-2243 [MEDIUM] CVE-2014-2243: mediawiki - includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, ... includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timing differences in responses to incorrect token guesses. Scope: local b

CVE-2021-41800 [MEDIUM] CVE-2021-41800: mediawiki - MediaWiki before 1.36.2 allows a denial of service (resource consumption because... MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled. Scope: local bookworm: resolved (fixed in 1:1.35.4-1) bullseye: resolved (fixed in 1:1.35.4-1~deb11u1) forky: resolved (fi

CVE-2021-30158 [MEDIUM] CVE-2021-30158: mediawiki - An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x be... An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable to use Special:ResetTokens. This has security relevance because a blocked user might have accidentally shared a token, or might know that a token has been compromised, and yet is not able to block any potential future use of the token by an unaut

CVE-2015-8627 [MEDIUM] CVE-2015-8627: mediawiki - MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x... MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote attackers to bypass intended access restrictions by using an IP address that was not supposed to have been allowed. Scope: local bookworm: resolved (fixed in 1:1.25.5-1) bullse

CVE-2012-1581 [MEDIUM] CVE-2012-1581: mediawiki - MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers... MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users. Scope: local bookworm: resolved (fixed in 1:1.15.5-9) bullseye: resolved (fixed in 1:1.15.5-9) forky: resolved (fixed in 1:1.15.5-9) sid: resolved (fixed in 1:1.15.5-9) tr

CVE-2025-61643 [LOW] CVE-2025-61643: mediawiki - Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associate... Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Scope: local bookworm: resolved (fixed in 1:1.39.17-1~deb12u1) bullseye: resolved (fixed in 1:1.35.13-1+deb11u5) forky: resolved (fixed in 1:1

CVE-2021-30458 [MEDIUM] CVE-2021-30458: mediawiki - An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.1... An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a tag, bypassing sanitization steps, and potentially allowing for XSS. Scope: local bookworm: resolved (fixed in 1:1.35.2-1) bullseye: resolved (fixed in 1:1.35.2-1) forky: resolved (fixed in 1:

CVE-2020-35480 [MEDIUM] CVE-2020-35480: mediawiki - An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that... An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the viewer cannot see are handled differently, exposing sensitive information about the hidden status to unprivileged viewers. This exists on various code paths. Scope: lo

CVE-2010-1648 [MEDIUM] CVE-2010-1648: mediawiki - Cross-site request forgery (CSRF) vulnerability in the login interface in MediaW... Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form. Scope: local bookworm: resolved (fixed in 1:1.15.4-1) bullseye: resolved

CVE-2013-1951 [MEDIUM] CVE-2013-1951: mediawiki - A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x... A cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.5 and 1.20.x before 1.20.4 and allows remote attackers to inject arbitrary web script or HTML via Lua function names. Scope: local bookworm: resolved (fixed in 1:1.19.5-1) bullseye: resolved (fixed in 1:1.19.5-1) forky: resolved (fixed in 1:1.19.5-1) sid: resolved (fixed in 1:1.19.5-1) trixie: res

CVE-2020-35479 [MEDIUM] CVE-2020-35479: mediawiki - MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translat... MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is always unsafe for HTML in a month value. This affects MediaWiki 1.12.0 and later. Scope: local bookworm: resolved (fixed in 1:1.35.1-1) bullseye: resolved (fixed in 1:1.3

CVE-2021-30157 [MEDIUM] CVE-2021-30157: mediawiki - An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x be... An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter-* label messages are output in HTML unescaped, leading to XSS. Scope: local bookworm: resolved (fixed in 1:1.35.2-1) bullseye: resolved (fixed in 1:1.35.2-1) fo

CVE-2020-25814 [MEDIUM] CVE-2020-25814: mediawiki - In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related... In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creates a message with [javascript:payload xss] and turns it into a jQuery object with mw.message().parse(). The expected result is that the jQuery object does not contain an tag (or it does not have a href attribute, or it's empty, etc.). The actua

CVE-2023-45361 [MEDIUM] CVE-2023-45361: mediawiki - An issue was discovered in VectorComponentUserLinks.php in the Vector Skin compo... An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-intro-page MalformedTitleException is uncaught if it is not a valid title, leading to incorrect web pages. Scope: local bookworm: resolved (fixed in 1:1.39.5-1~deb12u1) bullseye: resolved forky: resolved (fixed in 1:1.3

CVE-2025-61646 [LOW] CVE-2025-61646: mediawiki - Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associate... Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1. Scope: local bookworm: resolved (fixed in 1:1.39.17-1~deb12u1) bullseye: resolved (fixed in 1:1.35.13-1+deb11u5) forky: resolved (fixed in 1:1.43.5+d

CVE-2020-35477 [MEDIUM] CVE-2020-35477: mediawiki - MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some s... MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggles the "Change visibility of selected log entries" checkbox (or a tags checkbox) next to it, there is a redirection to the main page's action=historysubmit (instead