Wikimedia Vulnerabilità

Sequenza temporale

Genere

Prodotto

Wikimedia MediaWiki10
Wikimedia analytics-quarry-web2

Contromisure

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

Sfruttabilità

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined12

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent0
Network12

Autenticazione

Not Defined0
High0
Low4
None8

Interazione dell'utente

Not Defined0
Required6
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤64
≤74
≤80
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤62
≤74
≤80
≤92
≤100

VulDB

≤10
≤20
≤30
≤42
≤56
≤62
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤76
≤82
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k8
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (4): MediaWiki (9), Parsoid (1), analytics-quarry-web (1), mediawiki-extensions-I18nTags (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
05/01/20234.44.3Wikimedia mediawiki-extensions-I18nTags Unlike Parser I18nTags_body.php cross site scriptingContent Management SystemNot DefinedOfficial Fix0.000630.07CVE-2018-25065
22/04/20214.84.6Wikimedia analytics-quarry-web Content Type app.py cross site scriptingContent Management SystemNot DefinedOfficial Fix0.000660.00CVE-2020-36324
09/04/20214.84.6Wikimedia Parsoid Wikitext WTUtils.php cross site scriptingContent Management SystemNot DefinedOfficial Fix0.000870.00CVE-2021-30458
10/07/20196.46.1Wikimedia MediaWiki API rivelazione di un 'informazioneContent Management SystemNot DefinedOfficial Fix0.002340.00CVE-2019-12474
10/07/20196.46.1Wikimedia MediaWiki API escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.001900.00CVE-2019-12473
10/07/20197.47.1Wikimedia MediaWiki Access Control escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000780.00CVE-2019-12472
10/07/20195.24.9Wikimedia MediaWiki cross site scriptingContent Management SystemNot DefinedOfficial Fix0.005550.00CVE-2019-12471
10/07/20195.45.1Wikimedia MediaWiki RevisionDelete Page escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000910.00CVE-2019-12470
10/07/20195.45.1Wikimedia MediaWiki Special:EditTags Username escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000910.00CVE-2019-12469
10/07/20198.58.5Wikimedia MediaWiki Special:ChangeEmail escalazione di privilegiContent Management SystemNot DefinedNot Defined0.005610.00CVE-2019-12468

2 non vengono visualizzate più voci

Interested in the pricing of exploits?

See the underground prices here!