DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
MediaWiki: Mehre Schwachstellen
Advisory ansehen veröffentlicht 2023-10-08
Ein Angreifer kann mehrere Schwachstellen in MediaWiki ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen oder vertrauliche Informationen offenzulegen.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45374US | medium5.3 | — | ||
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSR… | ||||
| CVE-2023-45373US | medium6.1 | — | ||
An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSep… | ||||
| CVE-2023-45372US | medium5.3 | — | ||
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInterac… | ||||
| CVE-2023-45371US | high7.5 | — | ||
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging it… | ||||
| CVE-2023-45370US | medium5.3OT erhöht | — | ||
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams: Special:SportsManager… | ||||
| CVE-2023-45369US | medium4.3 | — | ||
An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Usernames of hidden users are expos… | ||||
| CVE-2023-45367US | medium6.5 | — | ||
An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. A user can use a rest.php/checkuser/… | ||||
| CVE-2023-45364US | medium5.3 | — | ||
An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrec… | ||||
| CVE-2023-45363US | high7.5 | — | ||
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of servi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
- CVE Database vom 2023-10-09external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan