VDB

GCVE-110-MAGEIA-2020-381

GCVE-110-MAGEIA-2020-381
Advisory Published
Vulnetix · Advisory published September 30, 2020
Multiple security issues were discovered in MediaWiki: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate limiting against brute force attempts (CVE-2020-25812, CVE-2020-25813, CVE-2020-25814, CVE-2020-25815, CVE-2020-25827, CVE-2020-25828). Possible issues with actors not being loaded from the correct database or wiki (CVE-2020-25869).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiamediawiki0 (affected), 1.31.10-1.mga7 (unaffected)—

Aliases

CVE-2020-25812CVE-2020-25813CVE-2020-25814CVE-2020-25815CVE-2020-25827CVE-2020-25828CVE-2020-25869

References

Updated mediawiki packages fix security vulnerability
advisory
Updated mediawiki packages fix security vulnerability
advisory
Updated mediawiki packages fix security vulnerability
issue
Updated mediawiki packages fix security vulnerability
issue
Updated mediawiki packages fix security vulnerability
issue

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›