CVE-2020-10534

In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled...

CVE-2020-10534

In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled...

CVE-2020-10534

The CVE-2020-10534 issue affects the MediaWiki World: GlobalBlocking extension prior to 2020-03-10 and affected MediaWiki versions up to 1.34.0. The vulnerability arises from IP range evaluation where an IP address that is contained in two ranges, one of which is locally disabled, can allow block...

PT-2020-12190 · Wikimedia +1 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.34.0 GlobalBlocking extension before 2020-03-10 Description: An issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address i...

CVE-2020-10534: Incorrect Authorization

In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated privileges. This is related to the case in which an IP address is contained in two ranges, one of which is locally disabled...

CVE-2012-4380

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors...

CVE-2012-4380

CVE-2012-4380 affects MediaWiki before 1.18.5 and 1.19.x before 1.19.2, allowing remote attackers to bypass the GlobalBlocking extension IP address blocking and create an account via unspecified vectors. The connected sources consistently describe the same impact across Windows/Linux OpenVAS entr...

CVE-2012-4380

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account via unspecified vectors...

PT-2017-5152

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.18.5 MediaWiki versions 1.19.x prior to 1.19.2 Description: The issue allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account. Recommendations: For MediaWiki versions...

MediaWiki < 1.18.5 / 1.19.2 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by multiple security vulnerabilities : - A stored cross-site scripting HTML injection vulnerability exists because the application fails to sufficiently sanitize user-supplied input submitted to the...