mediawiki

Debian Bookworm

deb.debian.org

www.mediawiki.org

Releases1

Last Release6 months ago

website engine for collaborative work

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2026-34095NVD↗	< 1.43.7, >= 1.44.0, < 1.44.4, >= 1.45.0, < 1.45.2	May 11, 2026Monday, 11 May 2026, 18:16	6.1 MEDIUM	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, includes/Request/FauxResponse.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2026-34094NVD↗	< 1.43.7, >= 1.44.0, < 1.44.4, >= 1.45.0, < 1.45.2	May 11, 2026Monday, 11 May 2026, 18:16	3.8 LOW	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2026-34093NVD↗	< 1.43.7, >= 1.44.0, < 1.44.4, >= 1.45.0, < 1.45.2	May 11, 2026Monday, 11 May 2026, 18:16	5.3 MEDIUM	—
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Specials/SpecialUserRights.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2026-34092NVD↗	< 1.43.7, >= 1.44.0, < 1.44.4, >= 1.45.0, < 1.45.2	May 11, 2026Monday, 11 May 2026, 16:17	7.5 HIGH	—
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin.Php. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2026-34091NVD↗	< 1.43.7, >= 1.44.0, < 1.44.4, >= 1.45.0, < 1.45.2	May 11, 2026Monday, 11 May 2026, 16:17	7.5 HIGH	—
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2026-34088NVD↗	< 1.43.7, >= 1.44.0, < 1.44.4, >= 1.45.0, < 1.45.2	May 11, 2026Monday, 11 May 2026, 16:17	7.5 HIGH	—
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This issue affects MediaWiki: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2026-34087NVD↗	< 1.43.7, >= 1.44.0, < 1.44.4, >= 1.45.0, < 1.45.2	May 11, 2026Monday, 11 May 2026, 16:17	7.5 HIGH	—
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2025-67480NVD↗	>= 1.39.0, < 1.39.16, >= 1.43.0, < 1.43.6, >= 1.44.0, < 1.44.3, = 1.45.0	Feb 3, 2026Tuesday, 3 February 2026, 02:16	6.5 MEDIUM	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1.
CVE-2025-67484NVD↗	>= 1.39.0, < 1.39.16, >= 1.43.0, < 1.43.6, >= 1.44.0, < 1.44.3, = 1.45.0	Feb 3, 2026Tuesday, 3 February 2026, 02:16	9.8 CRITICAL	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1.
CVE-2025-67483NVD↗	>= 1.43.0, < 1.43.6, >= 1.44.0, < 1.44.3, = 1.45.0	Feb 3, 2026Tuesday, 3 February 2026, 02:16	6.1 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Page.Preview.Js. This issue affects MediaWiki: from * before 1.43.6, 1.44.3, 1.45.1.
CVE-2025-67481NVD↗	>= 1.39.0, < 1.39.16, >= 1.43.0, < 1.43.6, >= 1.44.0, < 1.44.3, = 1.45.0	Feb 3, 2026Tuesday, 3 February 2026, 02:16	6.1 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.JqueryMsg/mediawiki.JqueryMsg.Js. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1.
CVE-2025-67475NVD↗	>= 1.39.0, < 1.39.16, >= 1.43.0, < 1.43.6, >= 1.44.0, < 1.44.3, = 1.45.0	Feb 3, 2026Tuesday, 3 February 2026, 02:16	6.1 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/CommentFormatter/CommentParser.Php. This issue affects MediaWiki: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1.
CVE-2025-67476NVD↗	>= 1.44.0, < 1.44.3, = 1.45.0	Feb 3, 2026Tuesday, 3 February 2026, 02:16	4.3 MEDIUM	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Import/ImportableOldRevisionImporter.Php. This issue affects MediaWiki: from * before 1.44.3, 1.45.1.
CVE-2025-67477NVD↗	>= 1.44.0, < 1.44.3, = 1.45.0	Feb 3, 2026Tuesday, 3 February 2026, 02:16	6.1 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Apisandbox/ApiSandboxLayout.Js. This issue affects MediaWiki: from * before 1.44.3, 1.45.1.
CVE-2025-61646NVD↗	< 1.39.14, >= 1.43.0, < 1.43.4, = 1.44.0	Feb 3, 2026Tuesday, 3 February 2026, 01:15	5.4 MEDIUM	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/RecentChanges/EnhancedChangesList.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61645NVD↗	< 1.44.1	Feb 3, 2026Tuesday, 3 February 2026, 01:15	6.1 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/pager/CodexTablePager.Php. This issue affects MediaWiki: from * before 1.44.1.
CVE-2025-11261NVD↗	< 1.39.15, >= 1.43.0, < 1.43.5, >= 1.44.0, < 1.44.2	Feb 3, 2026Tuesday, 3 February 2026, 01:15	6.1 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Language/mediawiki.Language.Js. This issue affects MediaWiki: from * before 1.39.15, 1.43.5, 1.44.2.
CVE-2025-61642NVD↗	< 1.39.14, >= 1.43.0, < 1.43.4, = 1.44.0	Feb 3, 2026Tuesday, 3 February 2026, 00:16	6.1 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61643NVD↗	< 1.39.14, >= 1.43.0, < 1.43.4, = 1.44.0	Feb 3, 2026Tuesday, 3 February 2026, 00:16	6.1 MEDIUM	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61641NVD↗	< 1.39.14, >= 1.43.0, < 1.43.4, = 1.44.0	Feb 3, 2026Tuesday, 3 February 2026, 00:16	6.1 MEDIUM	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiQueryAllPages.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61640NVD↗	< 1.39.14, >= 1.39.15, < 1.43.4, >= 1.43.5, < 1.44.1	Feb 3, 2026Tuesday, 3 February 2026, 00:16	4.8 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Rcfilters/ui/RclToOrFromWidget.Js. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61639NVD↗	< 1.39.14, >= 1.39.15, < 1.43.4, >= 1.43.5, < 1.44.1	Feb 3, 2026Tuesday, 3 February 2026, 00:16	4.8 MEDIUM	—
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61638NVD↗	< 1.39.14, >= 1.39.15, < 1.43.4, >= 1.43.5, < 1.44.1	Feb 3, 2026Tuesday, 3 February 2026, 00:16	4.8 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid. This vulnerability is associated with program files includes/parser/Sanitizer.Php, src/Core/Sanitizer.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1; Parsoid: from * before 0.16.6, 0.20.4, 0.21.1.
CVE-2025-61637NVD↗	< 1.39.14, >= 1.39.15, < 1.43.4, >= 1.43.5, < 1.44.1	Feb 3, 2026Tuesday, 3 February 2026, 00:16	4.8 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Action/mediawiki.Action.Edit.Preview.Js, resources/src/mediawiki.Page.Preview.Js. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61636NVD↗	< 1.39.14, >= 1.39.15, < 1.43.4, >= 1.43.5, < 1.44.1	Feb 3, 2026Tuesday, 3 February 2026, 00:16	4.8 MEDIUM	—
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
CVE-2025-61634NVD↗	< 1.39.14, >= 1.39.15, < 1.43.4, >= 1.43.5, < 1.44.1	Feb 3, 2026Tuesday, 3 February 2026, 00:16	3.1 LOW	—
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handler/PageHTMLHandler.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.