DeutschShown in its original language — a full translation is planned for a future version.
MediaWiki: Mehre Schwachstellen
view advisory published 2023-10-08
Ein Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-45374US | medium5.3 | — | ||
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSR… | ||||
| CVE-2023-45373US | medium6.1 | — | ||
An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSep… | ||||
| CVE-2023-45372US | medium5.3 | — | ||
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInterac… | ||||
| CVE-2023-45371US | high7.5 | — | ||
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging it… | ||||
| CVE-2023-45370US | medium5.3OT elevated | — | ||
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams: Special:SportsManager… | ||||
| CVE-2023-45369US | medium4.3 | — | ||
An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Usernames of hidden users are expos… | ||||
| CVE-2023-45367US | medium6.5 | — | ||
An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. A user can use a rest.php/checkuser/… | ||||
| CVE-2023-45364US | medium5.3 | — | ||
An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrec… | ||||
| CVE-2023-45363US | high7.5 | — | ||
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of servi… | ||||
02
references
External citations — patches, advisories, analysis.
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan