UBUNTU-CVE-2026-102975
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости mediawiki
За последние 30 дней в mediawiki опубликовано уязвимостей: 9; в каталоге KEV: 0.
Уязвимостей: 294
UBUNTU-CVE-2026-102974
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоUBUNTU-CVE-2026-102973
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоUBUNTU-CVE-2026-102972
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоUBUNTU-CVE-2026-102971
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоUBUNTU-CVE-2026-102970
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоUBUNTU-CVE-2026-102968
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоUBUNTU-CVE-2026-102967
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоUBUNTU-CVE-2026-102966
[Unknown description]
- Обновитесь до 1:1.43.10+dfsg-1
Опубликовано ОбновленоRemote Code Execution via Unsafe Deserialization in LogItem Import
Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано ОбновленоFull Account Takeover from BotPasswords and OAuth via action=changeauthenticationdata
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано ОбновленоPretty-printed API output combined with centralauthtoken allows XSS with certain gadgets
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php, includes/ResourceLoader/Module.Php, includes/Hooks/Handlers/PageDisplayHookHandler.Php, includes/LogFormatter/PermissionChangeLogFormatter.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9; CentralAuth: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано Обновлено$wgNonincludableNamespaces can be bypassed by embedding redirect in other namespaces
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано ОбновленоQueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано ОбновленоSyntaxHighlight stored XSS via unsanitized 'linelinks' attribute
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlight_GeSHi: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано Обновленоmw.Api.getErrorMessage() may return injected HTML if used without errorformat=html
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано Обновлено"Total number of distinct authors" statistic at action=info does not exclude revisions where the author name was deleted
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/InfoAction.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано ОбновленоCore log entries for exceptions and XSS issues in log entry formatting code that may be caused by user-controlled input
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Language/Language.Php, includes/Logging/BlockLogFormatter.Php, includes/Logging/LogFormatter.Php, includes/Logging/PatrolLogFormatter.Php, includes/Logging/RenameuserLogFormatter.Php, includes/Logging/TagLogFormatter.Php, includes/Specials/SpecialVersion.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано ОбновленоAPI identification of users on private wikis
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiUserrights.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Обновитесь до 1:1.43.9+dfsg-1
Опубликовано ОбновленоCVE-2026-5266
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerability is associated with program files includes/Api/ApiEchoNotifications.Php. This issue affects Echo: from * before 1.43.7, 1.44.4, 1.45.2.
- Обновитесь до 1:1.43.8+dfsg-1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.