mediawiki

Direct Vulnerabilities

Known vulnerabilities in the mediawiki package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Improper Authorization

*
  • L
Cross-site Scripting (XSS)

*
  • L
Information Exposure

*
  • L
Information Exposure

*
  • L
Improper Authentication

*
  • L
Improper Authentication

*
  • L
Information Exposure

*
  • L
Information Exposure

*
  • L
Open Redirect

*
  • L
Open Redirect

*
  • L
Information Exposure

*
  • L
Information Exposure

*
  • M
Cross-site Scripting (XSS)

*
  • L
CVE-2023-29141

*
  • L
Cross-site Scripting (XSS)

*
  • L
Information Exposure

*
  • L
CVE-2022-34912

*
  • L
Cross-site Scripting (XSS)

*
  • L
Improper Resource Shutdown or Release

*
  • L
Information Exposure

*
  • L
Cross-site Scripting (XSS)

*
  • L
Information Exposure

*
  • L
Improper Check for Unusual or Exceptional Conditions

*
  • M
Cross-site Scripting (XSS)

*
  • M
Resource Exhaustion

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2024-34502

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2023-45362

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2023-36674

*
  • M
Cross-site Scripting (XSS)

*
  • M
CVE-2022-41767

*
  • M
Incorrect Authorization

*
  • M
CVE-2023-22909

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Improper Cross-boundary Removal of Sensitive Data

*
  • M
Incorrect Permission Assignment for Critical Resource

*
  • M
Cross-site Scripting (XSS)

*
  • M
Incorrect Authorization

*
  • M
Improper Privilege Management

*
  • M
Improper Privilege Management

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Resource Exhaustion

*
  • M
Resource Exhaustion

*
  • M
Missing Authentication for Critical Function

*
  • M
Missing Authentication for Critical Function

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Incorrect Authorization

*
  • M
Incorrect Authorization

*
  • M
Incorrect Authorization

*
  • M
Incorrect Authorization

*
  • M
Improper Preservation of Permissions

*
  • M
Improper Preservation of Permissions

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Cross-site Scripting (XSS)

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Improper Neutralization of Special Elements

*
  • M
Improper Neutralization of Special Elements

*
  • M
Open Redirect

*
  • M
Open Redirect

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Information Exposure

*
  • M
Improper Access Control

*
  • H
Incorrect Default Permissions

*
  • H
Incorrect Default Permissions

*