[SECURITY] [DLA 3148-1] mediawiki security update

Debian LTS Advisory DLA-3148-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 12, 2022 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.31.16-1+deb10u4 CVE ID : CVE-2022-41765 CVE-2022-41767 Several security vulnerabilities were discovered in...

FreeBSD : mediawiki -- multiple vulnerabilities (67057b48-41f4-11ed-86c3-080027881239)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 67057b48-41f4-11ed-86c3-080027881239 advisory. - Mediawiki reports: T316304, CVE-2022-41767 SECURITY: reassignEdits doesn't update results in...

CVE-2021-41765

Affected software : ResourceSpace 9.5–9.6 (rev 18274). Vulnerability : SQL injection in pages/edit_fields/9_ajax/add_keyword.php allows remote unauthenticated attackers to run arbitrary SQL commands via the k parameter. This can reveal the full contents of the ResourceSpace database and, if an ad...