Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-9481
5.9
MEDIUMCVSS v3
Severity scale
010
Description
The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.>= 1.23.9, < 1.24.1, >= 1.23.0, < 1.23.8, >= 1.19.24, < 1.22.15, < 1.19.23NVD
mediawiki
NPMA JavaScript framework for the MediaWiki API.
NPMA JavaScript framework for the MediaWiki API.>= 1.23.9, < 1.24.1, >= 1.23.0, < 1.23.8, >= 1.19.24, < 1.22.15, < 1.19.23NVD
Crates.io