1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2023-7e9d6015f6

[FEDORA-2023-7e9d6015f6] Fedora 39: mediawiki

Severity Medium
Affected Packages 1
CVEs 2
Info Packages References Vulnerabilities

https://lists.wikimedia.org/hyperkitty/list/mediawiki-
announce(a)lists.wikimedia.org/thread/H46H5ZYZG2PYUQ5STK7NWKF7GXYW7H6B/

Package Affected Version
pkg:rpm/fedora/mediawiki?distro=fedora-39 < 1.39.4.1.fc39
ID
FEDORA-2023-7e9d6015f6
Severity
medium
Severity from
CVE-2023-36675
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2023-7e9d6015f6
Published
2023-09-15T19:01:54
(12 months ago)
Modified
2023-09-15T19:01:54
(12 months ago)
Rights
Copyright 2023 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 2233911 Bug #2233911 - CVE-2023-36674 mediawiki: Manualthumb bypasses badFile lookup [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2233911
Bugzilla 2217429 Bug #2217429 - CVE-2023-36675 mediawiki: cross site scripting [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2217429
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/mediawiki?distro=fedora-39 fedora mediawiki < 1.39.4.1.fc39 fedora-39
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date