Mediawiki Vulnérabilités

Chronologie

L'année dernière

Version

1.399
1.1999
1.2197
1.094
1.194

Contre-mesures

Official Fix274
Temporary Fix0
Workaround0
Unavailable2
Not Defined37

Exploitabilité

High18
Functional0
Proof-of-Concept33
Unproven7
Not Defined255

Vecteur d'accès

Not Defined0
Physical0
Local8
Adjacent33
Network272

Authentification

Not Defined0
High0
Low106
None207

Interaction de l'utilisateur

Not Defined0
Required160
None153

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤32
≤430
≤5103
≤683
≤759
≤818
≤95
≤1013

CVSSv3 Temp

≤10
≤21
≤31
≤440
≤5111
≤688
≤744
≤810
≤95
≤1013

VulDB

≤10
≤20
≤34
≤462
≤596
≤675
≤740
≤820
≤92
≤1014

NVD

≤10
≤20
≤30
≤40
≤514
≤630
≤745
≤825
≤97
≤108

CNA

≤10
≤20
≤31
≤41
≤50
≤60
≤70
≤81
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k100
<2k155
<5k54
<10k3
<25k1
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k312
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (300): 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.3.8, 1.3.9, 1.3.11, 1.3.12, 1.3.13, 1.3.14, 1.3.15, 1.4, 1.4 Beta1, 1.4 Beta2, 1.4 Beta3, 1.4 Beta4, 1.4 Beta5, 1.4 Beta6, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.4.11, 1.4.12, 1.4.13, 1.4.14, 1.5, 1.5 Alpha1, 1.5 Alpha2, 1.5 Beta1, 1.5 Beta2, 1.5 Beta3, 1.5 Beta4, 1.5 Rc2, 1.5 Rc3, 1.5 Rc4, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.5 R14348, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.6.11, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.10, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.11, 1.11 Development, 1.11.0rc1, 1.11.1, 1.11.2, 1.12, 1.12.1, 1.12.2, 1.12.3, 1.13, 1.13.1, 1.13.2, 1.13.3, 1.14, 1.15, 1.15.1, 1.15.2, 1.15.3, 1.16, 1.16.1, 1.16.2, 1.16.3, 1.16.4, 1.16.5, 1.16.6, 1.16.7, 1.16.8, 1.16.9, 1.17, 1.17.1, 1.17.2, 1.18, 1.18.1, 1.18.2, 1.18.3, 1.18.4, 1.18.5, 1.19, 1.19.1, 1.19.2, 1.19.3, 1.19.4, 1.19.5, 1.19.6, 1.19.7, 1.19.8, 1.19.9, 1.19.11, 1.19.12, 1.19.13, 1.19.14, 1.19.15, 1.19.16, 1.19.17, 1.19.18, 1.19.19, 1.19.21, 1.19.22, 1.19.23, 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.20.7, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.22, 1.22.1, 1.22.2, 1.22.3, 1.22.4, 1.22.5, 1.22.6, 1.22.7, 1.22.8, 1.22.9, 1.22.11, 1.22.12, 1.22.13, 1.22.14, 1.23, 1.23.1, 1.23.2, 1.23.3, 1.23.4, 1.23.5, 1.23.6, 1.23.7, 1.23.8, 1.23.9, 1.23.11, 1.23.12, 1.23.13, 1.23.14, 1.23.15, 1.24, 1.24.1, 1.24.2, 1.24.3, 1.24.4, 1.25, 1.25.1, 1.25.2, 1.25.3, 1.26, 1.26.1, 1.26.2, 1.26.3, 1.27, 1.27.1, 1.27.2, 1.27.3, 1.27.4, 1.27.5, 1.28, 1.28.1, 1.28.2, 1.29, 1.29.1, 1.29.2, 1.30, 1.30.1, 1.31, 1.31.1, 1.31.2, 1.31.3, 1.31.4, 1.31.5, 1.31.6, 1.31.7, 1.31.8, 1.31.9, 1.31.11, 1.31.12, 1.31.13, 1.31.14, 1.32, 1.32.1, 1.33, 1.33.1, 1.33.2, 1.33.3, 1.34, 1.34.1, 1.34.2, 1.34.3, 1.35, 1.35.1, 1.35.2, 1.35.3, 1.35.4, 1.35.5, 1.35.6, 1.35.7, 1.35.8, 1.35.9, 1.35.11, 1.35.12, 1.35.13, 1.36, 1.36.1, 1.36.2, 1.36.3, 1.37, 1.37.1, 1.37.2, 1.37.3, 1.37.4, 1.38, 1.38.1, 1.38.2, 1.38.3, 1.38.4, 1.38.5, 1.39, 1.39.1, 1.39.2, 1.39.3, 1.39.4, 1.39.5, 1.40, 1.40.1, 2.3, 2.4, 2.4.1, 2.4.2, 4, 4.0, 4.0.1, 4.1, 4.2, Stable 2003-08-29, Stable 2003-11-07, Stable 2003-11-17

Link to Product Website: https://www.mediawiki.org/wiki/MediaWiki

Type de logiciel: Content Management System

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
12/01/20244.44.4MediaWiki Phonos Extension PhonosButton.js cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23178
12/01/20243.53.4MediaWiki WatchAnalytics Extension Special:PageStatistics cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23177
12/01/20244.84.7MediaWiki GlobalBlocking Extension Special:GlobalBlock cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23179
12/01/20244.44.4MediaWiki PageTriage Extension cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23174
12/01/20244.44.4MediaWiki CheckUser Extension SpecialCheckUserLog cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23172
12/01/20244.44.4MediaWiki CampaignEvents Extension Special:EventDetails cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23171
12/01/20244.84.7MediaWiki Cargo Extension CargoAppliedFilter.php cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23173
22/12/20234.84.7MediaWiki RightsLogFormatter.php cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-51704
11/12/20234.84.7Semantic MediaWiki Special:Ask cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-48614
03/11/20234.44.4MediaWiki i18n Message MediaWiki:Youhavenewmessagesfromusers youhavenewmessages cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-45360
03/11/20233.93.8MediaWiki DifferenceEngine.php divulgation de l'information$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-45362
09/10/20235.35.2MediaWiki Deleted Revision Article.php elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-45364
09/10/20235.55.4MediaWiki ApiPageSet.php dénie de service$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-45363
25/09/20236.66.6Mediawiki XML File cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2023-3550
21/08/20234.44.3MediaWiki Bad Image List elévation de privilèges$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-36674
30/06/20234.84.8MediaWiki Wikibase SiteLinksView.php cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2023-37302
30/06/20235.45.4MediaWiki Wikibase SubmitEntityAction elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-37301
26/06/20234.84.7MediaWiki Block BlockLogFormatter.php BlockLogFormatter cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-36675
24/05/20234.94.9MediaWiki elévation de privilèges$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-41766
22/04/20235.25.1MediaWiki cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2013-6451
15/04/20234.34.1MediaWiki VisualEditor Extension divulgation de l'information$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-30153
31/03/20234.34.1MediaWiki Header dénie de service$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-29141
04/02/20233.83.7DaSchTour matomo-mediawiki-extension Username Piwik.hooks.php cross site scripting$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.05CVE-2017-20175
21/01/20234.44.4MediaWiki cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.01CVE-2023-22910
21/01/20234.54.4MediaWiki authentification faible$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-22912

288 plus d'entrées ne sont pas affichées

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!