Количество 7
Количество 7
CVE-2023-3550
Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.
CVE-2023-3550
Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.
CVE-2023-3550
Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator.
CVE-2023-3550
Mediawiki v1.40.0 does not validate namespaces used in XML files. The ...
GHSA-4pqg-hr8r-h5cw
MediaWiki malicious XML upload leads to privilege escalation
BDU:2023-07505
Уязвимость программного средства для реализации гипертекстовой среды MediaWiki, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
ROS-20250814-01
Уязвимость mediawiki
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-3550 Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator. | CVSS3: 7.3 | 0% Низкий | почти 2 года назад |
 | CVE-2023-3550 Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator. | CVSS3: 7.3 | 0% Низкий | почти 2 года назад |
 | CVE-2023-3550 Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to become an administrator by sending a malicious link to the instance administrator. | CVSS3: 7.3 | 0% Низкий | почти 2 года назад |
| CVE-2023-3550 Mediawiki v1.40.0 does not validate namespaces used in XML files. The ... | CVSS3: 7.3 | 0% Низкий | почти 2 года назад |
| GHSA-4pqg-hr8r-h5cw MediaWiki malicious XML upload leads to privilege escalation | CVSS3: 7.3 | 0% Низкий | почти 2 года назад |
 | BDU:2023-07505 Уязвимость программного средства для реализации гипертекстовой среды MediaWiki, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 9 | 0% Низкий | почти 2 года назад |
 | ROS-20250814-01 Уязвимость mediawiki | CVSS2: 10 | 0% Низкий | 23 дня назад |
Уязвимостей на страницу