Known vulnerabilities in mediawiki (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:mediawiki_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 35
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mediawiki (Debian package) mediawiki (Debian package) is affected by 35 known vulnerabilities: 1 high, 13 medium, 21 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113755 - Improper Authentication
CVE-2025-6926
CWE-287 Medium
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU113752 - Improper Authentication
CVE-2025-6597
CWE-287 Low
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU113750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6595
CWE-79 Medium
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU113749 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-6594
CWE-79 Low
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU113748 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6593
CWE-200 Low
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU113745 - Improper input validation
CVE-2025-6591
CWE-20 Low
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU113744 - Improper Access Control
CVE-2025-6590
CWE-284 Medium
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU113742 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-32072
CWE-79 Low
No
No
1:1.39.13-1~deb12u1 07.08.2025 SB2025080751
SB2025080752
#VU77907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36675
CWE-79 Low
No
No
1:1.35.11-1~deb11u1, 1:1.39.4-1~deb12u1 03.07.2023 SB2023070330
SB2023070630
SB2023082445
and 2 more
#VU77906 - Unrestricted Upload of File with Dangerous Type
CVE-2023-36674
CWE-434 Medium
No
No
1:1.35.11-1~deb11u1, 1:1.39.4-1~deb12u1 03.07.2023 SB2023070330
SB2023070630
SB2023082445
and 2 more
#VU74228 - Exposure of sensitive information to an unauthorized actor
CVE-2023-29141
CWE-200 Medium
No
No
1:1.35.11-1~deb11u1, 1:1.39.4-1~deb12u1 31.03.2023 SB2023033113
SB2023070630
SB20230818164
and 1 more
#VU56983 - Permissions, Privileges, and Access Controls
CVE-2021-41801
CWE-264 Medium
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
#VU56982 - Improper Access Control
CVE-2021-41800
CWE-284 Medium
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU56981 - Resource exhaustion
CVE-2021-41799
CWE-400 Medium
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU56980 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41798
CWE-79 Medium
Available
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU54499 - Improper Access Control
CVE-2021-35197
CWE-284 Low
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.07.2021 SB2021070121
SB2021070122
SB2021071701
and 4 more
#VU54224 - Out-of-bounds write
CVE-2021-3517
CWE-787 High
No
No
1:1.35.13-1~deb11u1, 1:1.39.5-1~deb12u1 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 42 more
#VU52025 - Permissions, Privileges, and Access Controls
CVE-2021-30152
CWE-264 Low
No
No
1:1.31.14-1~deb10u1 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU51776 - Resource Management Errors
CVE-2021-27291
CWE-399 Medium
No
No
1:1.31.14-1~deb10u1 30.03.2021 SB2021031407
SB2021033004
SB2021041202
and 17 more
#VU51449 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-20270
CWE-835 Low
No
No
1:1.31.14-1~deb10u1 14.03.2021 SB2021031407
SB2021031410
SB2021041202
and 14 more


Showing elements 1 - 20 out of 35