Wikimedia kayıtları
wikimedia üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %46,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-116 Improper Encoding or Escaping of Output1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-401 Missing Release of Memory after Effective Lifetime1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2024-47841İstismar yok | Path traversal when loading stylesheetswikimedia · wikimedia-extensions-css · CWE-22 | Orta6,9 | — | %34,6 | 4 Eki 2024 |
27İzleyin | CVE-2024-47848İstismar yok | User can review/unreview articles while blockedthe wikimedia foundation · mediawiki - pagetriage · CWE-200 | Orta6,9 | — | %0,5 | 4 Eki 2024 |
27İzleyin | CVE-2024-47845İstismar yok | CSS sanitizer used incorrectly, and is easily bypassedwikimedia · wikimedia-extensions-css · CWE-116 | Orta6,9 | — | %0,4 | 4 Eki 2024 |
27İzleyin | CVE-2024-47840İstismar yok | Stored XSS through sidebar in Apex skinwikimedia · apex · CWE-79 | Orta6,9 | — | %0,3 | 4 Eki 2024 |
24İzleyin | CVE-2019-19329İstismar yok | In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, arwikimedia · wikidata query gui · CWE-79 | Orta6,1 | — | %1,4 | 27 Kas 2019 |
24İzleyin | CVE-2021-30458İstismar yok | An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2.wikimedia · parsoid · CWE-79 | Orta6,1 | — | %1,0 | 9 Nis 2021 |
24İzleyin | CVE-2019-19328İstismar yok | ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entitwikimedia · wikidata query gui · CWE-79 | Orta6,1 | — | %0,9 | 27 Kas 2019 |
24İzleyin | CVE-2019-19327İstismar yok | ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of wikimedia · wikidata query gui · CWE-79 | Orta6,1 | — | %0,9 | 27 Kas 2019 |
24İzleyin | CVE-2020-36324İstismar yok | Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json conwikimedia · analytics-quarry-web · CWE-79 | Orta6,1 | — | %0,6 | 21 Nis 2021 |
24İzleyin | CVE-2018-25065İstismar yok | Wikimedia mediawiki-extensions-I18nTags Unlike Parser I18nTags_body.php cross site scriptingwikimedia · mediawiki-extensions-i18ntags · CWE-79 | Orta6,1 | — | %0,5 | 5 Oca 2023 |
24İzleyin | CVE-2026-0671İstismar yok | Multiple stored i18n/message-key XSSes in UploadWizardwikimedia · mediawiki-extensions-uploadwizard · CWE-79 | Orta6,1 | — | %0,2 | 8 Oca 2026 |
21İzleyin | CVE-2026-0817İstismar yok | CampaignEvents API missing authorization exposes meeting and chat URLswikimedia · campaignevents · CWE-862 | Orta5,3 | — | %0,3 | 9 Oca 2026 |
9İzleyin | CVE-2026-34089İstismar yok | Memory leak in Scribunto causes runJobs.php to run out of memorywikimedia · scribunto · CWE-401 | Düşük2,3 | — | %0,4 | 11 May 2026 |
9İzleyin | CVE-2026-22710İstismar yok | Stored XSS through autocomment system messages in Wikibasewikimedia · wikibase · CWE-79 | Düşük2,3 | — | %0,2 | 8 Oca 2026 |
0İzleyin | CVE-2025-61638Kavram kanıtı | Sanitizer::validateAttributes data-XSSmediawiki · mediawiki · CWE-79 | —0,0 | — | %0,2 | 2 Şub 2026 |
- CVE-2024-4784137İzleyin
Path traversal when loading stylesheets
OrtaCVSS 6,9İstismar yokEPSS %35wikimedia · wikimedia-extensions-css4 Eki 2024
- CVE-2024-4784827İzleyin
User can review/unreview articles while blocked
OrtaCVSS 6,9İstismar yokEPSS %1the wikimedia foundation · mediawiki - pagetriage4 Eki 2024
- CVE-2024-4784527İzleyin
CSS sanitizer used incorrectly, and is easily bypassed
OrtaCVSS 6,9İstismar yokEPSS %0wikimedia · wikimedia-extensions-css4 Eki 2024
- CVE-2024-4784027İzleyin
Stored XSS through sidebar in Apex skin
OrtaCVSS 6,9İstismar yokEPSS %0wikimedia · apex4 Eki 2024
- CVE-2019-1932924İzleyin
In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07, when mathematical expressions in results are displayed directly, ar
OrtaCVSS 6,1İstismar yokEPSS %1wikimedia · wikidata query gui27 Kas 2019
- CVE-2021-3045824İzleyin
An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2.
OrtaCVSS 6,1İstismar yokEPSS %1wikimedia · parsoid9 Nis 2021
- CVE-2019-1932824İzleyin
ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection in tooltips for entit
OrtaCVSS 6,1İstismar yokEPSS %1wikimedia · wikidata query gui27 Kas 2019
- CVE-2019-1932724İzleyin
ui/ResultView.js in Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT 2019-11-07 allows HTML injection when reporting the number of
OrtaCVSS 6,1İstismar yokEPSS %1wikimedia · wikidata query gui27 Kas 2019
- CVE-2020-3632424İzleyin
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json con
OrtaCVSS 6,1İstismar yokEPSS %1wikimedia · analytics-quarry-web21 Nis 2021
- CVE-2018-2506524İzleyin
Wikimedia mediawiki-extensions-I18nTags Unlike Parser I18nTags_body.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1wikimedia · mediawiki-extensions-i18ntags5 Oca 2023
- CVE-2026-067124İzleyin
Multiple stored i18n/message-key XSSes in UploadWizard
OrtaCVSS 6,1İstismar yokEPSS %0wikimedia · mediawiki-extensions-uploadwizard8 Oca 2026
- CVE-2026-081721İzleyin
CampaignEvents API missing authorization exposes meeting and chat URLs
OrtaCVSS 5,3İstismar yokEPSS %0wikimedia · campaignevents9 Oca 2026
- CVE-2026-340899İzleyin
Memory leak in Scribunto causes runJobs.php to run out of memory
DüşükCVSS 2,3İstismar yokEPSS %0wikimedia · scribunto11 May 2026
- CVE-2026-227109İzleyin
Stored XSS through autocomment system messages in Wikibase
DüşükCVSS 2,3İstismar yokEPSS %0wikimedia · wikibase8 Oca 2026
- CVE-2025-616380İzleyin
Sanitizer::validateAttributes data-XSS
CVSS 0,0Kavram kanıtıEPSS %0mediawiki · mediawiki2 Şub 2026