CVE-2022-46150

creationtimestamp| type| source ---|---|--- 2022-11-29 20:29:04+00:00| seen| https://t.me/cibsecurity/53668...

CVE-2022-46150 Discourse may allow exposure of hidden tags in the subject of notification emails

Discourse is an open-source discussion platform. Prior to version 2.8.13 of the stable branch and version 2.9.0.beta14 of the beta and tests-passed branches, unauthorized users may learn of the existence of hidden tags and that they have been applied to topics that they have access to. This issue...

CVE-2022-46150

Discourse prior to versions 2.8.13 (stable) and 2.9.0.beta14 (beta/tests-passed) contains an information disclosure vulnerability where unauthorized users can learn of hidden tags and that they have been applied to topics they access. The issue is fixed in 2.8.13 (stable) and 2.9.0.beta14 (beta/t...

CVE-2021-46150

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Special:CheckUserLog allows CheckUser XSS because of date mishandling, as demonstrated by an XSS payload in MediaWiki:October...

CVE-2021-46150

An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Special:CheckUserLog allows CheckUser XSS because of date mishandling, as demonstrated by an XSS payload in MediaWiki:October...

CVE-2021-46150

Vulnerability overview (CVE-2021-46150) : MediaWiki contains a stored XSS issue in the Special:CheckUserLog feature due to date mishandling. Affected versions are MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The output indicates an XSS payload can be executed via Media...

MediaWiki < 1.35.5, 1.36.x < 1.36.3, 1.37.x < 1.37.1 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...