Lucene search
K

9 matches found

CVE
CVE
added 2026/02/02 10:55 p.m.24 views

CVE-2025-6927

CVE-2025-6927 affects Wikimedia Foundation MediaWiki components BlockListPager.Php and ApiQueryBlocks.Php, enabling information exposure via autoblocks/global suppressions. Affected versions include MediaWiki core releases 1.42.x prior to 1.39.13, 1.42.7–1.43.2, and 1.44.0; remediation is to upgr...

2.3CVSS5.3AI score0.00031EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/02 10:55 p.m.24 views

CVE-2025-6927 Autoblocks from global account suppressions are publicly visible

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php, includes/api/ApiQueryBlocks.Php. This issue affects MediaWiki: from = 1.42.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0...

2.3CVSS0.00031EPSS
Exploits0References1
OSV
OSV
added 2024/03/06 11:11 a.m.8 views

BIT-MEDIAWIKI-2021-36128

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented...

9.8CVSS9.5AI score0.00566EPSS
Exploits1References4
OSV
OSV
added 2021/07/02 1:15 p.m.14 views

CVE-2021-36128

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented...

9.8CVSS6.9AI score
Exploits0References3
NVD
NVD
added 2021/07/02 1:15 p.m.12 views

CVE-2021-36128

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented...

9.8CVSS0.00566EPSS
Exploits1References3
Prion
Prion
added 2021/07/02 1:15 p.m.8 views

Design/Logic Flaw

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented...

7.5CVSS9.4AI score0.00566EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2021/07/02 1:0 p.m.41 views

CVE-2021-36128

The CVE-2021-36128 entry concerns the MediaWiki CentralAuth extension (up to version 1.36) with autoblocks for CentralAuth-issued suppression blocks not being implemented correctly. This is the concrete detail provided across multiple connected sources. The impact is described in the description ...

9.8CVSS9.4AI score0.00566EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/07/02 1:0 p.m.14 views

CVE-2021-36128

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented...

9.7AI score0.00566EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2021/06/12 12:0 a.m.3 views

PT-2021-21125 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.36 Description: An issue was discovered in the CentralAuth extension. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented. Recommendations: For MediaWiki versions prior to 1.36,...

9.8CVSS6.1AI score0.034EPSS
Exploits18References76
Rows per page
Query Builder