Known vulnerabilities in MediaWiki - page 2

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89216 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29883
CWE-200 Low
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU89215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25109
CWE-79 Low
No
No
1.39.7, 1.40.3, 1.41.1 07.05.2024 SB2024050729
#VU85568 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23178
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23178
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85566 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23177
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85565 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23179
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85563 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23176
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23172
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85561 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23171
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23173
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU85559 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23174
CWE-79 Low
No
No
1.35.14, 1.39.6, 1.40.2 18.01.2024 SB2024011820
#VU81443 - Security Features
CWE-254 Low
No
No
1.35.12, 1.39.5, 1.40.1 03.10.2023 SB2023100344
#VU81442 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
1.35.12, 1.39.5, 1.40.1 03.10.2023 SB2023100344
#VU81441 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CWE-451 Low
No
No
1.39.5, 1.40.1 03.10.2023 SB2023100344
#VU81440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.40.1 03.10.2023 SB2023100344
#VU81439 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Low
No
No
1.35.12, 1.39.5, 1.40.1 03.10.2023 SB2023100344
#VU81438 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CWE-451 Low
No
No
1.39.5, 1.40.1 03.10.2023 SB2023100344
#VU81268 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3550
CWE-79 Low
No
No
1.35.12, 1.39.5, 1.40.1 29.09.2023 SB2023100344
#VU77906 - Unrestricted Upload of File with Dangerous Type
CVE-2023-36674
CWE-434 Medium
No
No
1.35.11, 1.38.7, 1.39.4 03.07.2023 SB2023070330
SB2023070630
SB2023082445
and 2 more
#VU75203 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-29197
CWE-444 Medium
No
No
1.35.11, 1.38.7, 1.39.4 18.04.2023 SB2023041824
SB2023070330
SB2023082035
and 4 more


Showing elements 21 - 40 out of 293