Vulnerabilidades do Weirdgloop mediawiki-extensions-Bucket
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Weirdgloop mediawiki-extensions-Bucket: 2 registro(s), com versões afetadas e correções.
CVE-2026-30917
Alta · 8.8
CWE-79 10/03/2026
Stored XSS on Bucket namespace pages
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to 2.1.1, a stored XSS can be inserted into any Bucket table field that has a PAGE type, which will execute whenever a user views that table's corresponding Bucket namespace page. This vulnerability is fixed in 2.1.1.
CVE-2025-61766
Média · 6.5
CWE-674 06/10/2025
Bucket vulnerable to infinite recursion when querying a bucket using the != operator
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the `!=` comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leading to a denial of service. Version 1.0.0 contains a patch for the issue.