MGASA-2018-0433 Updated mediawiki packages fix security vulnerabilities

🗓️ 03 Nov 2018 11:55:18Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Updated mediawiki packages address security vulnerabilities and enhance user protection.

Reporter	Title	Published	Views	Family All 91
ArchLinux	[ASA-201809-5] mediawiki: multiple issues	25 Sep 201800:00	–	archlinux
BDU FSTEC	The vulnerability of the software for implementing the hypertext environment MediaWiki, related to deficiencies in the authentication process, allows a violator to circumvent the account lockout implemented by CentralAuth.	2 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for implementing the hypertext environment MediaWiki, related to insecure management of privileges, allows a violator to compromise the integrity of the protected information.	2 Nov 202000:00	–	bdu_fstec
FreeBSD	mediawiki -- multiple vulnerabilities	29 Aug 201800:00	–	freebsd
CNVD	MediaWiki Security Control Bypass Vulnerability	21 Sep 201800:00	–	cnvd
CNVD	MediaWiki Information Disclosure Vulnerability (CNVD-2019-18906)	21 Sep 201800:00	–	cnvd
CNVD	MediaWiki Restriction Bypass Vulnerability	21 Sep 201800:00	–	cnvd
CVE	CVE-2018-0503	4 Oct 201820:00	–	cve
CVE	CVE-2018-0504	4 Oct 201820:00	–	cve
CVE	CVE-2018-0505	4 Oct 201820:00	–	cve

Source	Link
advisories	www.advisories.mageia.org/MGASA-2018-0433.html
bugs	www.bugs.mageia.org/show_bug.cgi
lists	www.lists.wikimedia.org/pipermail/mediawiki-announce/2018-September/000223.html

16 Apr 2026 06:25Current

5.3Medium risk

Vulners AI Score5.3

CVSS 24

CVSS 36.5

EPSS0.02797

mediawiki packages security vulnerabilities user protection log event centralauth botpasswords