Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mediawiki mediawiki 1.24.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2015-8002
The chunked upload API (ApiUpload) in MediaWiki prior to 1.23.11, 1.24.x prior to 1.24.4, and 1.25.x prior to 1.25.3 allows remote authenticated users to cause a denial of service (disk consumption) via a file upload using one byte chunks.
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.2
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.1
NA
CVE-2015-8004
MediaWiki prior to 1.23.11, 1.24.x prior to 1.24.4, and 1.25.x prior to 1.25.3 does not properly restrict access to revisions, which allows remote authenticated users with the viewsuppressed user right to remove revision suppressions via a crafted revisiondelete action, which ret...
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.2
NA
CVE-2015-8005
MediaWiki prior to 1.23.11, 1.24.x prior to 1.24.4, and 1.25.x prior to 1.25.3 uses the thumbnail ImageMagick command line argument, which allows remote malicious users to obtain the installation path by reading the metadata of a PNG thumbnail file.
Mediawiki Mediawiki
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.2
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki 1.25.0
NA
CVE-2015-6727
The Special:DeletedContributions page in MediaWiki prior to 1.23.10, 1.24.x prior to 1.24.3, and 1.25.x prior to 1.25.2 allows remote malicious users to determine if an IP is autoblocked via the "Change block" text.
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.2
Canonical Ubuntu Linux 15.04
6.1
CVSSv3
CVE-2015-8622
Cross-site scripting (XSS) vulnerability in MediaWiki prior to 1.23.12, 1.24.x prior to 1.24.5, 1.25.x prior to 1.25.4, and 1.26.x prior to 1.26.1, when is configured with a relative URL, allows remote authenticated users to inject arbitrary web script or HTML via wikitext, as de...
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.26.0
Mediawiki Mediawiki 1.24.4
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.3
Mediawiki Mediawiki
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.25.2
8.8
CVSSv3
CVE-2015-8624
The User::matchEditToken function in includes/User.php in MediaWiki prior to 1.23.12, 1.24.x prior to 1.24.5, 1.25.x prior to 1.25.4, and 1.26.x prior to 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which al...
Mediawiki Mediawiki 1.24.4
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.25.2
Mediawiki Mediawiki 1.25.3
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.26.0
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.25.1
7.5
CVSSv3
CVE-2015-8625
MediaWiki prior to 1.23.12, 1.24.x prior to 1.24.5, 1.25.x prior to 1.25.4, and 1.26.x prior to 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote malicious users to read arbitrary files via an @ (at sign) character in unspecified POST a...
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.2
Mediawiki Mediawiki 1.26.0
Mediawiki Mediawiki 1.25.3
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.24.4
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.2
9.8
CVSSv3
CVE-2015-8626
The User::randomPassword function in MediaWiki prior to 1.23.12, 1.24.x prior to 1.24.5, 1.25.x prior to 1.25.4, and 1.26.x prior to 1.26.1 generates passwords smaller than $wgMinimalPasswordLength, which makes it easier for remote malicious users to obtain access via a brute-for...
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki 1.26.0
Mediawiki Mediawiki 1.24.4
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.3
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.25.2
5.3
CVSSv3
CVE-2015-8627
MediaWiki prior to 1.23.12, 1.24.x prior to 1.24.5, 1.25.x prior to 1.25.4, and 1.26.x prior to 1.26.1 do not properly normalize IP addresses containing zero-padded octets, which might allow remote malicious users to bypass intended access restrictions by using an IP address that...
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki 1.25.2
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki 1.26.0
Mediawiki Mediawiki 1.25.3
Mediawiki Mediawiki 1.24.4
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.24.3
5.3
CVSSv3
CVE-2015-8628
The (1) Special:MyPage, (2) Special:MyTalk, (3) Special:MyContributions, (4) Special:MyUploads, and (5) Special:AllMyUploads pages in MediaWiki prior to 1.23.12, 1.24.x prior to 1.24.5, 1.25.x prior to 1.25.4, and 1.26.x prior to 1.26.1 allow remote malicious users to obtain sens...
Mediawiki Mediawiki 1.24.3
Mediawiki Mediawiki 1.24.4
Mediawiki Mediawiki 1.25.0
Mediawiki Mediawiki 1.25.1
Mediawiki Mediawiki
Mediawiki Mediawiki 1.24.1
Mediawiki Mediawiki 1.25.3
Mediawiki Mediawiki 1.24.0
Mediawiki Mediawiki 1.24.2
Mediawiki Mediawiki 1.25.2
Mediawiki Mediawiki 1.26.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »