Debian DLA-2847-1 : mediawiki - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2847 advisory. A security issue was discovered in MediaWiki, a website engine for collaborative work: Missing validation in the mcrundo action may allow allow an attacker to leak page...

CVE-2021-44858

CVE-2021-44858 (MediaWiki) : An authorization flaw in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1 allows unauthorized users to view private wiki content by chaining actions (action=edit&undo= followed by action=mcrundo and action=mcrrestore) on wikis with at least one ...

MediaWiki < 1.35.5, 1.36.x < 1.36.3, 1.37.x < 1.37.1 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

Updated mediawiki packages fix security vulnerabilities

Updated mediawiki packages fix security vulnerabilities: == Security fixes == T292763. CVE-2021-44854 REST API incorrectly publicly caches autocomplete search results from private wikis. T271037, CVE-2021-44856 Title blocked in AbuseFilter can be created via Special:ChangeContentModel. T297322,...

Debian DSA-5021-1 : mediawiki - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5021 advisory. Multiple security issues were discovered in MediaWiki, a website engine for collaborative work: Vulnerabilities in the mcrundo and rollback actions may allow...

[SECURITY] [DLA 2847-1] mediawiki security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2847-1 [email protected] https://www.debian.org/lts/security/ Moritz Muehlenhoff December 15, 2021 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5021-1] mediawiki security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5021-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 15, 2021 https://www.debian.org/security/faq -...