1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2023-d8ae3c122e

[FEDORA-2023-d8ae3c122e] Fedora 37: mediawiki

Severity Medium
Affected Packages 1
CVEs 2
Info Packages References Vulnerabilities

https://lists.wikimedia.org/hyperkitty/list/mediawiki-
announce(a)lists.wikimedia.org/thread/H46H5ZYZG2PYUQ5STK7NWKF7GXYW7H6B/

Package Affected Version
pkg:rpm/fedora/mediawiki?distro=fedora-37 < 1.38.7.1.fc37
ID
FEDORA-2023-d8ae3c122e
Severity
medium
Severity from
CVE-2023-36675
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2023-d8ae3c122e
Published
2023-09-02T01:33:42
(12 months ago)
Modified
2023-09-02T01:33:42
(12 months ago)
Rights
Copyright 2023 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 2233911 Bug #2233911 - CVE-2023-36674 mediawiki: Manualthumb bypasses badFile lookup [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2233911
Bugzilla 2217429 Bug #2217429 - CVE-2023-36675 mediawiki: cross site scripting [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2217429
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/mediawiki?distro=fedora-37 fedora mediawiki < 1.38.7.1.fc37 fedora-37
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date