25 matches found
MediaWiki < 1.31.12, 1.32 < 1.35.2 Multiple Vulnerabilities - Linux
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...
MediaWiki < 1.31.12, 1.32 < 1.35.2 Multiple Vulnerabilities - Windows
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...
UBUNTU-CVE-2021-30154
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header- messages are output in HTML unescaped, leading to XSS...
CVE-2021-30154
CVE-2021-30154 affects MediaWiki prior to 1.31.12 and 1.32.x through 1.35.x prior to 1.35.2. The issue is an XSS in which the mediastatistics-header-* messages are output in HTML unescaped on Special:NewFiles, enabling potential HTML/JS injection. Root cause: unescaped HTML output in that page fl...