Scratch-wiki

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Scratch-wiki records in CISA KEV

No Scratch-wiki vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Scratch Login 2 records MEDIUM Scratch Confirmaccount V3 1 record LOW Scratchsig 1 record MEDIUM

Records

2 records in Scratch Login · all components

TI-2020-11936 CVE-2020-15164

Authentication Bypass in Scratch Login (mediawiki-scratch-login)

MEDIUM 45

in Scratch Login (MediaWiki extension) before version 1.1, any account can be logged into by using the same username with leading, trailing, or repeated underscore(s), since those are treated as whitespace and trimmed by…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01174 Published 2020-08-28 Fixed in 1.1 CWE-287

TI-2022-20963 CVE-2022-42985 · GHSA-rmx9-w5vx-r35r

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure…

LOW 22

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting (XSS).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00406 Published 2022-11-17 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0