Vulnerabilities > Mediawiki > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-09 CVE-2023-45369 Incorrect Permission Assignment for Critical Resource vulnerability in Mediawiki
An issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.
network
low complexity
mediawiki CWE-732
4.3
2023-10-09 CVE-2023-45370 Unspecified vulnerability in Mediawiki
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.
network
low complexity
mediawiki
5.3
2023-10-09 CVE-2023-45372 Unspecified vulnerability in Mediawiki
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.
network
low complexity
mediawiki
5.3
2023-10-09 CVE-2023-45373 Cross-site Scripting vulnerability in Mediawiki
An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.
network
low complexity
mediawiki CWE-79
6.1
2023-10-09 CVE-2023-45374 Unspecified vulnerability in Mediawiki
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.
network
low complexity
mediawiki
5.3
2023-10-09 CVE-2023-45364 Incorrect Permission Assignment for Critical Resource vulnerability in multiple products
An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and 1.40.x before 1.40.1.
network
low complexity
mediawiki debian CWE-732
5.3
2023-10-09 CVE-2023-45367 Unspecified vulnerability in Mediawiki
An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.
network
low complexity
mediawiki
6.5
2023-08-20 CVE-2023-36674 Unspecified vulnerability in Mediawiki
An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40.x before 1.40.1.
network
low complexity
mediawiki
5.3
2023-06-30 CVE-2023-37300 Unspecified vulnerability in Mediawiki
An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3.
network
low complexity
mediawiki
5.3
2023-06-30 CVE-2023-37301 Unspecified vulnerability in Mediawiki
An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3.
network
low complexity
mediawiki
5.3