CVE-2019-16738
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.
Published Updated
PatchFirst · Latest vulnerabilities
mediawiki vulnerabilities · Page 9
Vulnerabilities published for mediawiki in the last 30 days: 11. Listed in the KEV catalogue: 0.
Vulnerabilities: 164
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Published UpdatedTarball was missing .htaccess files
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible.
Published UpdatedCVE-2014-1686
MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.