MediaWiki 1.39.6

CPE Details

MediaWiki 1.39.6
mediawiki
mediawiki
1.39.6
2023-12-29
14h15 +00:00
2023-12-29
14h15 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:mediawiki:mediawiki:1.39.6:*:*:*:*:*:*:*

Informations

Vendor

mediawiki

Product

mediawiki

Version

1.39.6

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-40596 2024-07-06 00h00 +00:00 An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The Special:Investigate feature can expose suppressed information for log events. (TimelineService does not support properly suppressing.)
4.3
Moyen
CVE-2024-40598 2024-07-06 00h00 +00:00 An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. The API can expose suppressed information for log events. (The log_deleted attribute is not applied to entries.)
4.3
Moyen
CVE-2024-40599 2024-07-06 00h00 +00:00 An issue was discovered in the GuMaxDD skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.
4.8
Moyen
CVE-2024-40602 2024-07-06 00h00 +00:00 An issue was discovered in the Tempo skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.
6.1
Moyen
CVE-2024-40603 2024-07-06 00h00 +00:00 An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request.
4.3
Moyen
CVE-2024-40604 2024-07-06 00h00 +00:00 An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries.
4.8
Moyen
CVE-2024-40605 2024-07-06 00h00 +00:00 An issue was discovered in the Foreground skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.
4.8
Moyen
CVE-2024-40600 2024-07-05 22h00 +00:00 An issue was discovered in the Metrolook skin for MediaWiki through 1.42.1. There is stored XSS via MediaWiki:Sidebar top-level menu entries.
6.1
Moyen
CVE-2024-40601 2024-07-05 22h00 +00:00 An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules.
6.5
Moyen
CVE-2024-23177 2024-01-11 23h00 +00:00 An issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur via the Special:PageStatistics page parameter.
6.1
Moyen
CVE-2024-23178 2024-01-11 23h00 +00:00 An issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js allows i18n-based XSS via the phonos-purge-needed-error message.
5.4
Moyen
CVE-2024-23179 2024-01-11 23h00 +00:00 An issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special:GlobalBlock?uselang=x-xss URI, i18n-based XSS can occur via the parentheses message. This affects subtitle links in buildSubtitleLinks.
6.1
Moyen