Lucene search
+L

2 matches found

OSV
OSV
added 2022/09/16 7:39 p.m.12 views

MGASA-2022-0338 Updated mediawiki packages fix security vulnerability

Username is not escaped in the "welcomeuser" message T308471. Bundled guzzlehttp/guzzle has been updated to 6.5.8, fixing several issues CVE-2022-29248, CVE-2022-31042, CVE-2022-31043, CVE-2022-31090, CVE-2022-31091...

8.1CVSS7.5AI score0.0182EPSS
SaveExploits0References8
FreeBSD
FreeBSD
added 2022/05/16 12:0 a.m.50 views

mediawiki -- multiple vulnerabilities

Mediawiki reports: T308471 Username is not escaped in the "welcomeuser" message. T308473 Username not escaped in the contributions-title message. T309377, CVE-2022-29248 Update "guzzlehttp/guzzle" to version 6.5.6. T311384, CVE-2022-27776 Update "guzzlehttp/guzzle" to 6.5.8/7.4.5...

8.1CVSS2.6AI score0.03653EPSS
SaveExploits1References1
Rows per page
Query Builder