Veille CVE

Recherche « The Wikimedia Foundation Mediawiki - CentralAuth extension »

2 CVE

  1. CVE-2026-103442 7.2 Élevée

    The Wikimedia Foundation MediaWiki CentralAuth extension

    External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43.

  2. CVE-2026-103047 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - CentralAuth extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.