Veille CVE

Recherche « The Wikimedia Foundation Mediawiki - WikiLambda Extension »

6 CVE

  1. CVE-2026-103446 7.4 Élevée

    The Wikimedia Foundation MediaWiki WikiLambda extension

    Authorization bypass through User-Controlled key vulnerability in The Wikimedia Foundation MediaWiki WikiLambda extension allows Authentication Bypass. This issue affects MediaWiki WikiLambda extension: 1.46.

  2. CVE-2026-103046 6.1 Moyenne

    The Wikimedia Foundation Mediawiki - WikiLambda Extension

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.

  3. CVE-2026-100383 4.8 Moyenne

    Wikimedia Foundation Mediawiki - WikiLambda Extension

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

  4. CVE-2026-100377 6.9 Moyenne

    Wikimedia Foundation Mediawiki - WikiLambda Extension

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - WikiLambda Extension allows Excavation. This issue affects Mediawiki - WikiLambda Extension: 1.47.0-alpha. The issue has been remediated on the `master` branch.

  5. CVE-2026-96872 2.9 Faible

    The Wikimedia Foundation Mediawiki - WikiLambda Extension

    Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0.

  6. CVE-2026-58517 4.3 Moyenne

    The Wikimedia Foundation Mediawiki - WikiLambda Extension · Mediawiki mediawiki

    Improper neutralization of input terminators vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Authentication Bypass. This issue affects Mediawiki - WikiLambda Extension: from * before 1.43.9,1.44.6,1.45.4.