According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.31.12 or 1.32.x prior to 1.35.2. It is, therefore, affected by a vulnerability in Special:Contributions that can leak that hidden users exist.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.36. It is, therefore, affected by a flaw when the blocker message is invalid in the content language, but also English is invalid on the wiki, which may permit remote attackers to bypass restrictions against abusive users.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
113997	MediaWiki < 1.31.12 Special Contributions Hidden User Leakage	Web App Scanning	Component Vulnerability	8/7/2023	8/9/2023	critical
113994	MediaWiki < 1.36.0 Invalid MediaWiki Abusefilter-blocker Breaks Filters	Web App Scanning	Component Vulnerability	8/7/2023	8/9/2023	critical
113998	MediaWiki 1.32.x < 1.35.2 Special Contributions Hidden User Leakage	Web App Scanning	Component Vulnerability	8/7/2023	8/9/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical