Debian Mediawiki vulnerabilities

CVE-2015-6727 [MEDIUM] CVE-2015-6727: mediawiki - The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before... The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" text. Scope: local bookworm: resolved (fixed in 1:1.25.5-1) bullseye: resolved (fixed in 1:1.25.5-1) forky: resolved (fixed in 1:1.25.5-1) sid: resolved (fixed in 1:1.2

CVE-2017-0366 [MEDIUM] CVE-2017-0366: mediawiki - Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG... Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration. Scope: local bookworm: resolved (fixed in 1:1.27.2-1) bullseye: resolved (fixed in 1:1.27.2-1) forky: resolved (fixed in 1:1.27.2-1) sid: resolved (fixed in 1:1.27.2-1) trixie: resolved (fixed in 1:1.27.2-1)

CVE-2017-0370 [MEDIUM] CVE-2017-0370: mediawiki - Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist i... Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter. Scope: local bookworm: resolved (fixed in 1:1.27.2-1) bullseye: resolved (fixed in 1:1.27.2-1) forky: resolved (fixed in 1:1.27.2-1) sid: resolved (fixed in 1:1.27.2-1) trixie: resolved (fixed in 1:1.27.2-1)

CVE-2020-10960 [MEDIUM] CVE-2020-10960: mediawiki - In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) c... In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in the user interface) to arbitrary DOM nodes via HTML content within a MediaWiki page. This occurs because jquery.makeCollapsible allows applying an event handler to any Cascading Style Sheets (CSS) selector. There is no known

CVE-2005-0535 [HIGH] CVE-2005-0535: mediawiki - Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11... Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users. Scope: local bookworm: resolved (fixed in 1.4.9) bullseye: resolved (fixed in 1.4.9) forky: resolved (fixed in 1.4.9) sid: resolved (fixed in 1.4.9) trixie: resolved (fi

CVE-2023-36674 [MEDIUM] CVE-2023-36674: mediawiki - An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x befor... An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1. It is possible to bypass the Bad image list (aka badFile) by using the thumb parameter (aka Manualthumb) of the File syntax. Scope: local bookworm: resolved (fixed in 1:1.39.4-1~deb12u1) bullseye: resolved (fixed in 1:1.35.11-

CVE-2026-34095 CVE-2026-34095: mediawiki bookworm: open bullseye: open forky: open sid: resolved (fixed in 1:1.43.8+dfsg-2) trixie: open

CVE-2015-2940 [MEDIUM] CVE-2015-2940: mediawiki - Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for M... Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors. Scope: local bookworm: resolved (fixed in 1:1.19.20+dfsg-2.3) bullseye: resolved (fixed in 1:1.19.20+dfsg-2.3) forky: resolved (

CVE-2014-5241 [MEDIUM] CVE-2014-5241: mediawiki - The JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18... The JSONP endpoint in includes/api/ApiFormatJson.php in MediaWiki before 1.19.18, 1.20.x through 1.22.x before 1.22.9, and 1.23.x before 1.23.2 accepts certain long callback values and does not restrict the initial bytes of a JSONP response, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks, and obtain sensitive information, via a

CVE-2012-4377 [MEDIUM] CVE-2012-4377: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.18.5 and 1.19.x b... Cross-site scripting (XSS) vulnerability in MediaWiki before 1.18.5 and 1.19.x before 1.19.2 allows remote attackers to inject arbitrary web script or HTML via a File: link to a nonexistent image. Scope: local bookworm: resolved (fixed in 1:1.19.2-1) bullseye: resolved (fixed in 1:1.19.2-1) forky: resolved (fixed in 1:1.19.2-1) sid: resolved (fixed in 1:1.19.2-1)

CVE-2015-8622 [MEDIUM] CVE-2015-8622: mediawiki - Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x bef... Cross-site scripting (XSS) vulnerability in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as demonstrated by a wikilink to a page named "javascript:alert('XSS!')." Scope: local bookworm: re

CVE-2021-41798 [MEDIUM] CVE-2021-41798: mediawiki - MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not esc... MediaWiki before 1.36.2 allows XSS. Month related MediaWiki messages are not escaped before being used on the Special:Search results page. Scope: local bookworm: resolved (fixed in 1:1.35.4-1) bullseye: resolved (fixed in 1:1.35.4-1~deb11u1) forky: resolved (fixed in 1:1.35.4-1) sid: resolved (fixed in 1:1.35.4-1) trixie: resolved (fixed in 1:1.35.4-1)

CVE-2021-30154 [MEDIUM] CVE-2021-30154: mediawiki - An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x be... An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* messages are output in HTML unescaped, leading to XSS. Scope: local bookworm: resolved (fixed in 1:1.35.2-1) bullseye: resolved (fixed in 1:1.35.2-1) forky: resolved (fixed in 1:1.35.2-1) sid: resolved (fixed in 1:1.3

CVE-2020-25828 [MEDIUM] CVE-2020-25828: mediawiki - An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x be... An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version of mw.message().parse() doesn't escape HTML. This affects both message contents (which are generally safe) and the parameters (which can be based on user input). (When jqueryMsg is loaded, it correctly accepts only whitelisted tags in message co

CVE-2010-1150 [MEDIUM] CVE-2010-1150: mediawiki - MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle ... MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to conduct phishing attacks by arranging for a victim to login to the attacker's account and then execute a crafted user script, related to a "login CSRF" issue. Scope: local bo

CVE-2023-36675 [MEDIUM] CVE-2023-36675: mediawiki - An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x befor... An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, and 1.39.x before 1.39.4. BlockLogFormatter.php in BlockLogFormatter allows XSS in the partial blocks feature. Scope: local bookworm: resolved (fixed in 1:1.39.4-1~deb12u1) bullseye: resolved (fixed in 1:1.35.11-1~deb11u1) forky: resolved (fixed in 1:1.39.4-1) sid: resolved

CVE-2019-16738 [MEDIUM] CVE-2019-16738: mediawiki - In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of s... In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup. Scope: local bookworm: resolved (fixed in 1:1.31.4-1) bullseye: resolved (fixed in 1:1.31.4-1) forky: resolved (fixed in 1:1.31.4-1) sid: resolved (fixed in 1:1.31.4-1) trixie: resolved (fixed in 1:1.31.4-1)

CVE-2017-8812 [MEDIUM] CVE-2017-8812: mediawiki - MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows r... MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline. Scope: local bookworm: resolved (fixed in 1:1.27.4-1) bullseye: resolved (fixed in 1:1.27.4-1) forky: resolved (fixed in 1:1.27.4-1) sid: resolved (fixed in 1:1.27.4-1) trixie: resolved (fixed in

CVE-2013-7444 [MEDIUM] CVE-2013-7444: mediawiki - The Special:Contributions page in MediaWiki before 1.22.0 allows remote attacker... The Special:Contributions page in MediaWiki before 1.22.0 allows remote attackers to determine if an IP is autoblocked via the "Change block" text. Scope: local bookworm: resolved (fixed in 1:1.25.5-1) bullseye: resolved (fixed in 1:1.25.5-1) forky: resolved (fixed in 1:1.25.5-1) sid: resolved (fixed in 1:1.25.5-1) trixie: resolved (fixed in 1:1.25.5-1)

CVE-2015-8628 [MEDIUM] CVE-2015-8628: mediawiki - The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Spe... The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 allow remote attackers to obtain sensitive user login information via crafted links combined with page view statistics. Scope: local book