Wikimedia Foundation

Records256All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Wikimedia Foundation records in CISA KEV

No Wikimedia Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wikidata Query Gui 3 records LOW Parsoid 2 records LOW Wikimedia-extensions-css 2 records HIGH Analytics-quarry-web 1 record LOW Apex 1 record HIGH Campaignevents 1 record LOW Mediawiki-extensions-i18ntags 1 record LOW Mediawiki-extensions-uploadwizard 1 record LOW

Records

1 record in Analytics-quarry-web · all components

TI-2020-18607 CVE-2020-36324 · GHSA-3j62-59f5-6q98

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because…

LOW 28

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00626 Published 2021-04-21 No fix listed CWE-79

Open these records in search →

Critical	7
High	19
Medium	137
Low	49
No CVSS	44