Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DSA-5246-1
HistoryOct 04, 2022 - 12:00 a.m.

mediawiki - security update

2022-10-0400:00:00
Google
osv.dev
80
mediawiki
security update
software

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON

Bulletin has no description

Related

openvas 23
debian 3
nessus 10
osv 33
mageia 4
gentoo 1
freebsd 3
fedora 4
drupal 2
veracode 14
redhatcve 8
prion 14
cvelist 14
cve 14
ubuntucve 15
debiancve 14
nvd 14
github 3
cnvd 2
friendsofphp 3
archlinux 1
openvas
openvas
Debian: Security Advisory (DSA-5246-1)
2022-10-05 00:00:00
Mageia: Security Advisory (MGASA-2022-0338)
2022-09-19 00:00:00
Debian: Security Advisory (DLA-3117-1)
2022-09-23 00:00:00
debian
debian
[SECURITY] [DSA 5246-1] mediawiki security update
2022-10-04 18:53:33
[SECURITY] [DLA 3117-1] mediawiki security update
2022-09-22 14:38:08
[SECURITY] [DLA 3148-1] mediawiki security update
2022-10-11 22:30:01
nessus
nessus
Debian DSA-5246-1 : mediawiki - security update
2022-10-05 00:00:00
Debian DLA-3117-1 : mediawiki - LTS security update
2022-09-25 00:00:00
GLSA-202305-24 : MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00
osv
osv
mediawiki - security update
2022-09-22 00:00:00
mediawiki - security update
2022-10-12 00:00:00
CVE-2021-44855
2022-12-26 05:15:10
mageia
mageia
Updated mediawiki packages fix security vulnerability
2022-09-16 22:39:55
Updated mediawiki packages fix security vulnerability
2022-04-18 10:42:17
Updated mediawiki packages fix security vulnerability
2022-10-13 23:05:19
gentoo
gentoo
MediaWiki: Multiple Vulnerabilities
2023-05-21 00:00:00
freebsd
freebsd
mediawiki -- multiple vulnerabilities
2021-12-12 00:00:00
mediawiki -- multiple vulnerabilities
2021-12-01 00:00:00
mediawiki -- multiple vulnerabilities
2022-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: mediawiki-1.38.5-1.fc37
2023-01-27 08:58:39
[SECURITY] Fedora 37 Update: mediawiki-1.38.2-1.fc37
2022-09-12 17:57:50
[SECURITY] Fedora 36 Update: mediawiki-1.37.4-1.fc36
2022-09-09 11:23:50
drupal
drupal
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-011
2022-06-10 00:00:00
Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-010
2022-05-25 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-12-31 23:25:16
Cross-domain Cookie Leakage
2022-05-26 04:37:11
Information Disclosure
2022-06-13 05:07:04
redhatcve
redhatcve
CVE-2021-44856
2022-12-26 12:34:59
CVE-2021-44855
2022-12-26 11:34:59
CVE-2021-44854
2022-12-26 11:34:49
prion
prion
Design/Logic Flaw
2022-09-19 21:15:00
Code injection
2022-12-26 06:15:00
Design/Logic Flaw
2022-05-25 18:15:00
cvelist
cvelist
CVE-2022-28203
2022-09-19 00:00:00
CVE-2022-31042 Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle
2022-06-09 00:00:00
CVE-2021-44855
2022-12-26 00:00:00
cve
cve
CVE-2022-28202
2022-03-30 06:15:06
CVE-2022-28203
2022-09-19 21:15:09
CVE-2021-44854
2022-12-26 05:15:10
ubuntucve
ubuntucve
CVE-2022-34912
2022-07-02 00:00:00
CVE-2021-44854
2022-12-26 00:00:00
CVE-2021-44855
2022-12-26 00:00:00
debiancve
debiancve
CVE-2022-34911
2022-07-02 20:15:08
CVE-2021-44854
2022-12-26 05:15:10
CVE-2021-44856
2022-12-26 06:15:10
nvd
nvd
CVE-2022-34911
2022-07-02 20:15:08
CVE-2022-31043
2022-06-10 00:15:07
CVE-2021-44856
2022-12-26 06:15:10
github
github
Cross-domain cookie leakage in Guzzle
2022-05-25 18:09:55
Failure to strip the Cookie header on change in host or HTTP downgrade
2022-06-09 23:47:25
Fix failure to strip Authorization header on HTTP downgrade
2022-06-09 23:47:23
cnvd
cnvd
MediaWiki Cross-Site Scripting Vulnerability
2022-10-11 00:00:00
Guzzle Information Disclosure Vulnerability
2022-05-27 00:00:00
friendsofphp
friendsofphp
Fix failure to strip Authorization header on HTTP downgrade
2022-06-09 23:36:00
Cross-domain cookie leakage
2022-05-25 13:21:00
Failure to strip the Cookie header on change in host or HTTP downgrade
2022-06-09 23:36:00
archlinux
archlinux
[ASA-202204-14] mediawiki: cross-site scripting
2022-04-15 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

6

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON
Related for OSV:DSA-5246-1
openvas23debian3nessus10osv33mageia4gentoo1freebsd3fedora4drupal2veracode14redhatcve8prion14cvelist14cve14ubuntucve15debiancve14nvd14github3cnvd2friendsofphp3archlinux1