Advisories · Technology
The Wikimedia Foundation MediaWiki Wikibase extension.
Every CVE that names The Wikimedia Foundation MediaWiki Wikibase extension among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Unauthenticated arbitrary file deletion through Wikibase serialized entity parsing
- The Wikimedia Foundation MediaWiki Wikibase extension
- Insecure deserialization
- CVSS 2.3 Low
Stored XSS through autocomment system messages in Wikibase
- The Wikimedia Foundation Mediawiki - Wikibase Extension
- Cross-site scripting (XSS)