UBUNTU-CVE-2026-102975
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de mediawiki
Vulnérabilités publiées pour mediawiki au cours des 30 derniers jours : 9. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 294
UBUNTU-CVE-2026-102974
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourUBUNTU-CVE-2026-102973
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourUBUNTU-CVE-2026-102972
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourUBUNTU-CVE-2026-102971
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourUBUNTU-CVE-2026-102970
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourUBUNTU-CVE-2026-102968
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourUBUNTU-CVE-2026-102967
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourUBUNTU-CVE-2026-102966
[Unknown description]
- Mettez à jour vers 1:1.43.10+dfsg-1
Publication Mise à jourRemote Code Execution via Unsafe Deserialization in LogItem Import
Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourFull Account Takeover from BotPasswords and OAuth via action=changeauthenticationdata
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiChangeAuthenticationData.Php, includes/Api/ApiLinkAccount.Php, includes/Api/ApiRemoveAuthenticationData.Php, includes/Specials/SpecialLinkAccounts.Php, includes/Specials/SpecialUnlinkAccounts.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourPretty-printed API output combined with centralauthtoken allows XSS with certain gadgets
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation CentralAuth. This vulnerability is associated with program files includes/Api/ApiFormatBase.Php, includes/Api/ApiHelp.Php, includes/ResourceLoader/Module.Php, includes/Hooks/Handlers/PageDisplayHookHandler.Php, includes/LogFormatter/PermissionChangeLogFormatter.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9; CentralAuth: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jour$wgNonincludableNamespaces can be bypassed by embedding redirect in other namespaces
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Parser/Parser.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourQueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseFilters.Php. This issue affects AbuseFilter: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourSyntaxHighlight stored XSS via unsanitized 'linelinks' attribute
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation SyntaxHighlight_GeSHi. This vulnerability is associated with program files includes/SyntaxHighlight.Php. This issue affects SyntaxHighlight_GeSHi: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourmw.Api.getErrorMessage() may return injected HTML if used without errorformat=html
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Api/index.Js. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jour"Total number of distinct authors" statistic at action=info does not exclude revisions where the author name was deleted
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/InfoAction.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourCore log entries for exceptions and XSS issues in log entry formatting code that may be caused by user-controlled input
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Language/Language.Php, includes/Logging/BlockLogFormatter.Php, includes/Logging/LogFormatter.Php, includes/Logging/PatrolLogFormatter.Php, includes/Logging/RenameuserLogFormatter.Php, includes/Logging/TagLogFormatter.Php, includes/Specials/SpecialVersion.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourAPI identification of users on private wikis
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiUserrights.Php. This issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
- Mettez à jour vers 1:1.43.9+dfsg-1
Publication Mise à jourCVE-2026-5266
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo. This vulnerability is associated with program files includes/Api/ApiEchoNotifications.Php. This issue affects Echo: from * before 1.43.7, 1.44.4, 1.45.2.
- Mettez à jour vers 1:1.43.8+dfsg-1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.