Wikimedia vulnerabilities
We track 4 vulnerabilities in Wikimedia products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 5, 2024.
Latest Wikimedia vulnerabilities
- 7.5 High severity
Mediawiki - CSS Extension: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Path Traversal.This issue affects Mediawiki - CSS Extension: from 1.42.X before 1.42.2, from 1.41.X before
- 9.8 Critical severity
Mediawiki - Cargo: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Injection.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.
- 8.8 High severity
Mediawiki - Cargo: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1.
- 8.2 High severity
Mediawiki - CSS Extension: Improper Encoding or Escaping of Output
Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.