Vulnerabilities > Miraheze

DATE CVE VULNERABILITY TITLE RISK
2024-02-08 CVE-2024-25107 Cross-site Scripting vulnerability in Miraheze Wikidiscover
WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis.
network
low complexity
miraheze CWE-79
6.1
2022-04-04 CVE-2022-24813 Improper Authentication vulnerability in Miraheze Createwiki
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis.
network
low complexity
miraheze CWE-287
5.3
2021-09-01 CVE-2021-39186 Improper Input Validation vulnerability in Miraheze Globalnewfiles
GlobalNewFiles is a MediaWiki extension maintained by Miraheze.
network
miraheze CWE-20
4.3
2021-07-20 CVE-2021-32774 Cross-Site Request Forgery (CSRF) vulnerability in Miraheze Datadump
DataDump is a MediaWiki extension that provides dumps of wikis.
network
miraheze CWE-352
5.8
2021-06-28 CVE-2021-32722 Resource Exhaustion vulnerability in Miraheze Globalnewfiles
GlobalNewFiles is a mediawiki extension.
network
low complexity
miraheze CWE-400
4.0
2021-04-28 CVE-2021-29483 Information Exposure vulnerability in Miraheze Managewiki
ManageWiki is an extension to the MediaWiki project.
network
low complexity
miraheze CWE-200
5.0