The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5520 advisory.

  - Mediawiki v1.40.0 does not validate namespaces used in XML files. Therefore, if the instance administrator     allows XML file uploads, a remote attacker with a low-privileged user account can use this exploit to     become an administrator by sending a malicious link to the instance administrator. (CVE-2023-3550)

  - An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before     1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and     RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles     set. (CVE-2023-45363)

  - An issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1.39.5 and     1.40.x before 1.40.1. Deleted revision existence is leaked due to incorrect permissions being checked.
    This reveals that a given revision ID belonged to the given page title, and its timestamp, both of which     are not supposed to be public information. (CVE-2023-45364)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5520-1 : mediawiki - security update

high Nessus Plugin ID 182866

Version 1.1