Known vulnerabilities in MediaWiki - page 4

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68073 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41766
CWE-200 Medium
No
No
1.39.0 rc.1 10.10.2022 SB2022101001
#VU68072 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41765
CWE-200 Medium
No
No
1.39.0 rc.1 10.10.2022 SB2022101001
#VU68071 - Improper input validation
CVE-2022-41767
CWE-20 Medium
No
No
1.39.0 rc.1 10.10.2022 SB2022101001
#VU67987 - Improper Access Control
CVE-2022-41345
CWE-284 Low
No
No
1.35.8, 1.37.5, 1.38.3 07.10.2022 SB2022100714
#VU67986 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-41346
CWE-601 Medium
No
No
1.35.8, 1.37.5, 1.38.3 07.10.2022 SB2022100714
#VU67985 - Improper Access Control
CVE-2022-41344
CWE-284 Low
No
No
1.35.8, 1.37.5, 1.38.3 07.10.2022 SB2022100714
#VU67984 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39192
CWE-200 Medium
No
No
1.35.8, 1.37.5, 1.38.3 07.10.2022 SB2022100714
#VU67983 - Resource exhaustion
CVE-2022-39194
CWE-400 Low
No
No
1.35.8, 1.37.5, 1.38.3 07.10.2022 SB2022100714
#VU67982 - Exposure of sensitive information to an unauthorized actor
CVE-2022-39191
CWE-200 Medium
No
No
1.35.8, 1.37.5, 1.38.3 07.10.2022 SB2022100714
#VU62016 - Permissions, Privileges, and Access Controls
CVE-2022-28209
CWE-264 High
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62015 - Improper input validation
CVE-2022-28211
CWE-20 Medium
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62014 - Uncontrolled Recursion
CVE-2021-28210
CWE-674 Low
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2021061115
SB2022040806
SB2021042027
and 8 more
#VU62013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28208
CWE-79 Low
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62012 - Permissions, Privileges, and Access Controls
CVE-2022-28205
CWE-264 High
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62011 - Exposure of sensitive information to an unauthorized actor
CVE-2022-28207
CWE-200 Medium
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62010 - Permissions, Privileges, and Access Controls
CVE-2022-28206
CWE-264 High
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62009 - Exposure of sensitive information to an unauthorized actor
CVE-2022-28323
CWE-200 Medium
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62008 - Exposure of sensitive information to an unauthorized actor
CVE-2022-28325
CWE-200 Medium
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62007 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28326
CWE-79 Low
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62006 - Improper input validation
CVE-2022-28324
CWE-20 Medium
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806


Showing elements 61 - 80 out of 293