Read the docs

Wikimedia Foundation

Records256All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Wikimedia Foundation records in CISA KEV

No Wikimedia Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wikidata Query Gui 3 records LOW Parsoid 2 records LOW Wikimedia-extensions-css 2 records HIGH Analytics-quarry-web 1 record LOW Apex 1 record HIGH Campaignevents 1 record LOW Mediawiki-extensions-i18ntags 1 record LOW Mediawiki-extensions-uploadwizard 1 record LOW

Records

2 records in Wikimedia-extensions-css · all components

TI-2024-32106 CVE-2024-47845 · GHSA-rxh5-jm9f-fmwj

CSS sanitizer used incorrectly, and is easily bypassed

Priority HIGH 70

Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Code Injection.This issue affects Mediawiki - CSS Extension: from 1.39.X before 1.39.9, from 1.41.X befor…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00407 Published 2024-10-05 Fixed in 1.39.9, 1.41.3 +1 CWE-116
TI-2024-32105 CVE-2024-47841 · GHSA-44q7-44r8-rqj7

Path traversal when loading stylesheets

Priority HIGH 70

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Path Traversal.This issue affects Mediawiki - CSS Extension: from…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.34566 Published 2024-10-05 Fixed in 1.42.2, 1.41.3 +1 CWE-22
Open these records in search →