Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Wikimedia Foundation Mediawiki - AbuseFilter Extension 1.43.2 Clear all filters
TI-2025-33443 CVE-2025-53498 · GHSA-8q9r-c4j3-x28f

Lack of Audit Logging in AbuseFilter

Priority MEDIUM 63

Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00281 Published 2025-07-07 Fixed in 1.43.2 CWE-778
TI-2025-33444 CVE-2025-53499 · GHSA-f8g8-423p-p43f

Unauthorized Inspection of Protected Variables in AbuseFilter

Priority MEDIUM 47

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0033 Published 2025-07-07 Fixed in 1.43.2 CWE-862
TI-2025-33440 CVE-2025-53495 · GHSA-vr43-x7p6-79wp

Unauthorized Disclosure of IP Reputation in AbuseFilter

Priority MEDIUM 47

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0033 Published 2025-07-07 Fixed in 1.43.2 CWE-862