Поиск уязвимостей
Количество 4
Количество 4
CVE-2020-35625
An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment.
GHSA-9w6x-xx84-rm4g
An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment.
ALT-PU-2021-2069
ALT-PU-2021-2069: package `mediawiki-extensions-Widgets` update to version 1.3.0-alt1git
ALT-PU-2021-1712
ALT-PU-2021-1712: package `mediawiki` update to version 1.35.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-35625 An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment. | CVSS3: 8.8 | 1% Низкий | почти 6 лет назад |
| GHSA-9w6x-xx84-rm4g An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment. | 1% Низкий | больше 4 лет назад | |
| ALT-PU-2021-2069 ALT-PU-2021-2069: package `mediawiki-extensions-Widgets` update to version 1.3.0-alt1git | CVSS3: 8.8 | больше 5 лет назад | |
| ALT-PU-2021-1712 ALT-PU-2021-1712: package `mediawiki` update to version 1.35.2-alt1 | CVSS3: 8.8 | больше 5 лет назад |
Уязвимостей на страницу