| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | ≥ 1.19.24, < 1.22.15≥ 1.23.0, < 1.23.8≥ 1.23.9, < 1.24.1< 1.19.23 | 1.22.151.23.81.24.11.19.23 |
The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free