MediaWiki Open Redirect vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-10959 · ADVISORY
• wikimedia/mediawiki commit d4a552e · WEB
• gerrit.wikimedia.org/r/c/mediawiki/core/+/536725 · WEB
• FriendsOfPHP/security-advisories · WEB
• wikimedia/mediawiki · PACKAGE
• phabricator.wikimedia.org/T232932 · WEB
• phabricator.wikimedia.org/T240393 · WEB

mediawiki/core のその他の脆弱性

• CVE-2023-45363高 7.5An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It all…
• CVE-2023-29141緊急 9.8An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur …
• CVE-2021-41800中 5.3MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contrib…
• CVE-2020-25828中 6.1An issue was discovered in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. The non-jqueryMsg version of mw.message().parse…
• CVE-2020-25827高 7.5An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHA…