Wikimedia Vulnerabilidad

Cronología

Escribe

Content Management System12

Producto

Wikimedia MediaWiki10
Wikimedia Parsoid2

Contramedidas

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined12

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network12

Autenticación

Not Defined0
High0
Low6
None6

La interacción del usuario

Not Defined0
Required6
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤66
≤72
≤80
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤64
≤72
≤80
≤92
≤100

VulDB

≤10
≤20
≤30
≤42
≤58
≤60
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤78
≤80
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k6
<2k6
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (4): MediaWiki (9), Parsoid (1), analytics-quarry-web (1), mediawiki-extensions-I18nTags (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-01-054.44.3Wikimedia mediawiki-extensions-I18nTags Unlike Parser I18nTags_body.php cross site scriptingContent Management SystemNot DefinedOfficial Fix0.000630.04CVE-2018-25065
2021-04-224.84.6Wikimedia analytics-quarry-web Content Type app.py cross site scriptingContent Management SystemNot DefinedOfficial Fix0.000660.00CVE-2020-36324
2021-04-094.84.6Wikimedia Parsoid Wikitext WTUtils.php cross site scriptingContent Management SystemNot DefinedOfficial Fix0.000870.00CVE-2021-30458
2019-07-106.46.1Wikimedia MediaWiki API divulgación de informaciónContent Management SystemNot DefinedOfficial Fix0.002340.00CVE-2019-12474
2019-07-106.46.1Wikimedia MediaWiki API escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.001900.00CVE-2019-12473
2019-07-107.47.1Wikimedia MediaWiki Access Control escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.000780.00CVE-2019-12472
2019-07-105.24.9Wikimedia MediaWiki cross site scriptingContent Management SystemNot DefinedOfficial Fix0.005550.00CVE-2019-12471
2019-07-105.45.1Wikimedia MediaWiki RevisionDelete Page escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.000910.00CVE-2019-12470
2019-07-105.45.1Wikimedia MediaWiki Special:EditTags Username escalada de privilegiosContent Management SystemNot DefinedOfficial Fix0.000910.00CVE-2019-12469
2019-07-108.58.5Wikimedia MediaWiki Special:ChangeEmail escalada de privilegiosContent Management SystemNot DefinedNot Defined0.005610.00CVE-2019-12468

2 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 2 results.

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!