Upgrade Debian:11 gpac to version 1.0.1+dfsg1-2 or higher.

mediawiki vulnerabilities

Known vulnerabilities in the mediawiki package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2017-0371	*
M Improper Input Validation	*
L Incorrect Default Permissions	*
L Cross-site Request Forgery (CSRF)	*
M Open Redirect	*
L Improper Input Validation	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Arbitrary Code Injection	*
M Improper Input Validation	*
L Information Exposure	*
L Information Exposure	*
L CVE-2017-8812	*
M Arbitrary Code Injection	*
L Improper Input Validation	*
L Cross-site Scripting (XSS)	*
M Improper Input Validation	*
L Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
M Improper Access Control	*
M Cross-site Scripting (XSS)	*
M Improper Access Control	*
M Information Exposure	*
M Information Exposure	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Request Forgery (CSRF)	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Credentials Management	*
M Improper Access Control	*
M Access Restriction Bypass	*
L Resource Management Errors	*
L Improper Access Control	*
L Information Exposure	*
L Resource Management Errors	*
M Cross-site Request Forgery (CSRF)	*
M Information Exposure	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Resource Management Errors	*
M Cross-site Scripting (XSS)	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Request Forgery (CSRF)	*
M Resource Management Errors	*
M Cross-site Scripting (XSS)	*
M Resource Management Errors	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Arbitrary Command Injection	*
M Cross-site Request Forgery (CSRF)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Request Forgery (CSRF)	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*

Vulnerability

Vulnerable Version

CVE-2017-0371