MediaWiki — Vulnerabilities & Security Advisories 75

This page aggregates Common Weakness Enumerations (CWE) associated with the open-source wiki software product MediaWiki, developed by the Wikimedia Foundation and various community contributors. It serves as a centralized resource for tracking security weaknesses and their manifestations within this specific software ecosystem, providing a structured view of historical and current threats. The content collected here covers a broad range of vulnerability types, including cross-site scripting (XSS), information disclosure, remote code execution, and authentication bypass flaws. The time range spanned by these records extends from the early days of the software’s widespread adoption up to recent years, reflecting the evolving security landscape and remediation efforts over decades. Readers can use this aggregation to track vendor advisories and understand how specific weakness classes have impacted MediaWiki installations. It allows security professionals to examine the product’s vulnerability history, identifying patterns in exploitability and fix timelines. By reviewing these aggregated entries, users can gain insight into the overall security posture of MediaWiki, assess potential risks for their deployments, and compare the severity and frequency of different attack vectors. This resource supports informed decision-making for administrators and developers seeking to harden their wiki instances against known exploits. It emphasizes transparency by linking reported issues to their respective resolution statuses, facilitating a deeper understanding of the remediation process. Ultimately, the goal is to provide a clear, factual overview of security challenges without promoting any particular viewpoint or solution.