Known vulnerabilities in mediawiki (Debian package) 1:1.31.6-1~deb10u1

Vendor: Debian
Version: 1:1.31.6-1~deb10u1
Software CPE: cpe:2.3:o:debian:mediawiki_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 18
Public exploits: 1
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting mediawiki (Debian package) version 1:1.31.6-1~deb10u1 mediawiki (Debian package) 1:1.31.6-1~deb10u1 is affected by 18 vulnerabilities: 8 medium, 10 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56983 - Permissions, Privileges, and Access Controls
CVE-2021-41801
CWE-264 Medium
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
#VU56982 - Improper Access Control
CVE-2021-41800
CWE-284 Medium
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU56981 - Resource exhaustion
CVE-2021-41799
CWE-400 Medium
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU56980 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41798
CWE-79 Medium
Public exploit available
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.10.2021 SB2021100104
SB2021100620
SB2021100441
and 2 more
#VU54499 - Improper Access Control
CVE-2021-35197
CWE-284 Low
No
No
1:1.31.16-1~deb10u1, 1:1.35.4-1~deb11u1 01.07.2021 SB2021070121
SB2021070122
SB2021071701
and 4 more
#VU52030 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-30157
CWE-79 Low
No
No
1:1.31.14-1~deb10u1 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52029 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-30154
CWE-79 Low
No
No
1:1.31.14-1~deb10u1 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52028 - Improper Access Control
CVE-2021-30158
CWE-284 Medium
No
No
1:1.31.14-1~deb10u1 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52027 - Improper Access Control
CVE-2021-30159
CWE-284 Medium
No
No
1:1.31.14-1~deb10u1 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52026 - Improper Access Control
CVE-2021-30155
CWE-284 Medium
No
No
1:1.31.14-1~deb10u1 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU52025 - Permissions, Privileges, and Access Controls
CVE-2021-30152
CWE-264 Low
No
No
1:1.31.14-1~deb10u1 12.04.2021 SB2021041202
SB2021041203
SB2021071701
#VU51776 - Resource Management Errors
CVE-2021-27291
CWE-399 Medium
No
No
1:1.31.14-1~deb10u1 30.03.2021 SB2021031407
SB2021033004
SB2021041202
and 17 more
#VU51449 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-20270
CWE-835 Low
No
No
1:1.31.14-1~deb10u1 14.03.2021 SB2021031407
SB2021031410
SB2021041202
and 14 more
#VU49100 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35475
CWE-79 Low
No
No
1.31.12-1~deb10u1 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU49102 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35479
CWE-79 Low
No
No
1.31.12-1~deb10u1 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU49103 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35477
CWE-200 Low
No
No
1.31.12-1~deb10u1 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU49104 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35480
CWE-200 Low
No
No
1.31.12-1~deb10u1 18.12.2020 SB2020122119
SB2020122120
SB2021011261
and 1 more
#VU26568 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10960
CWE-79 Low
No
No
1:1.31.7-1~deb10u1 03.04.2020 SB2020040312
SB2020040313