Lucene search
+L

3 matches found

Mageia
Mageia
added 2023/06/28 5:21 a.m.256 views

Updated mediawiki packages fix security vulnerability

Bundled PapaParse copy in VisualEditor has known ReDos CVE-2020-36649. An issue was discovered in MediaWiki before 1.35.9. When installing with a pre-existing data directory that has weak permissions, the SQLite files are created with file mode 0644, i.e., world readable to local users. These fil...

9.8CVSS6.5AI score0.01388EPSS
SaveExploits3References5
OpenVAS
OpenVAS
added 2023/04/05 12:0 a.m.29 views

MediaWiki < 1.35.10, 1.36.x < 1.38.6, 1.39.x < 1.39.3 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

9.8CVSS6.8AI score0.01388EPSS
SaveExploits1References1
FreeBSD
FreeBSD
added 2020/04/02 12:0 a.m.33 views

mediawiki -- multiple vulnerabilities

Mediawikwi reports: T285159, CVE-2023-PENDING SECURITY: X-Forwarded-For header allows brute-forcing autoblocked IP addresses. T326946, CVE-2020-36649 SECURITY: Bundled PapaParse copy in VisualEditor has known ReDos. T330086, CVE-2023-PENDING SECURITY: OATHAuth allows replay attacks when MediaWiki...

7.5CVSS7.5AI score0.01388EPSS
SaveExploits1References1
Rows per page
Query Builder