Known vulnerabilities in MediaWiki - page 3

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-36675
CWE-79 Low
No
No
1.35.11, 1.38.7, 1.39.4 03.07.2023 SB2023070330
SB2023070630
SB2023082445
and 2 more
#VU77879 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37302
CWE-79 Low
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77878 - Improper input validation
CVE-2023-37301
CWE-20 Medium
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77877 - Improper Access Control
CVE-2023-37303
CWE-284 Medium
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77876 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37304
CWE-79 Low
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77875 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37253
CWE-200 Medium
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77874 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37254
CWE-79 Low
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37256
CWE-79 Low
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77872 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37252
CWE-200 Medium
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77871 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37251
CWE-79 Low
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU77852 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-37255
CWE-79 Low
No
No
1.35.11, 1.38.7, 1.39.4, 1.40.0 03.07.2023 SB2023070323
#VU74229 - Improper Authentication
CWE-287 Medium
No
No
1.35.10, 1.38.6, 1.39.3 31.03.2023 SB2023033113
#VU74228 - Exposure of sensitive information to an unauthorized actor
CVE-2023-29141
CWE-200 Medium
No
No
1.35.10, 1.38.6, 1.39.3 31.03.2023 SB2023033113
SB2023070630
SB20230818164
and 1 more
#VU74226 - Incorrect Regular Expression
CVE-2020-36649
CWE-185 Medium
No
No
1.35.10, 1.38.6, 1.39.3 31.03.2023 SB2023033112
SB2023033113
#VU71146 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22910
CWE-79 Medium
No
No
1.35.9, 1.38.5, 1.39.1 12.01.2023 SB2023011267
#VU71145 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22911
CWE-79 Medium
No
No
1.35.9, 1.38.5, 1.39.1 12.01.2023 SB2023011267
#VU71144 - Resource Management Errors
CVE-2023-22909
CWE-399 Medium
No
No
1.35.9, 1.38.5, 1.39.1 12.01.2023 SB2023011267
#VU71143 - Inadequate Encryption Strength
CVE-2023-22912
CWE-326 Medium
No
No
1.35.9, 1.38.5, 1.39.1 12.01.2023 SB2023011267
#VU71142 - Improper Authorization
CVE-2023-22945
CWE-285 Medium
No
No
1.35.9, 1.38.5, 1.39.1 12.01.2023 SB2023011267
#VU71141 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39193
CWE-200 Medium
No
No
1.35.9, 1.38.5, 1.39.1 12.01.2023 SB2023011267


Showing elements 41 - 60 out of 293