Vulnerabilidades do The Wikimedia Foundation Mediawiki - TemplateSandbox Extension

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam The Wikimedia Foundation Mediawiki - TemplateSandbox Extension: 2 registro(s), com versões afetadas e correções.

CVE-2026-100240 Crítica · 9.1 CWE-862 29/09/2026

TemplateSandbox does not check read permissions for the page being previewed

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.

CVE-2026-100376 Média · 4.8 CWE-79 25/09/2026

TemplateSandbox can be abused for XSS by asking another user to preview a page with a certain sandbox prefix

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - TemplateSandbox Extension allows Cross-Site Scripting (XSS). This issue affects Mediawiki - TemplateSandbox Extension: from * before 1.46.1, 1.45.5, 1.43.10.