Approved changes feed: RSS · Atom
cpe:2.3:a:mediawiki:checkuser:*:*:*:*:*:mediawiki:*:*
part: a version: * update: *
| Vendor | Mediawiki (cdb1ca1d-4622-5407-a7d8-3e891579b8c5) |
|---|---|
| Product | Checkuser (c587287c-d580-5dbf-8b08-2012fceb8734) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | mediawiki |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wikimedia/mediawiki-extensions-checkuser |
purl2cpe | 2026-06-01 10:10:57.562123 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34090 |
vulnerable | 2026-06-08 07:59:11.802787 |
Suggested investigations: Handle suppressed usernames
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser.
This issue affects CheckUser: from 1.45.0 before 1.45.2.
Published: 2026-05-11T14:50:50.318Z
Updated: 2026-05-11T15:51:32.487Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67478 |
vulnerable | 2026-06-08 07:41:19.868108 |
Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn"
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php.
This issue affects CheckUser: from * before 1.39.14, 1.43.4, 1.44.1.
Published: 2026-02-03T01:14:17.814Z
Updated: 2026-03-02T17:43:34.432Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61658 |
vulnerable | 2026-06-08 07:37:27.889686 |
Special:GlobalContributions shows edits on wikis the viewer doesn't have access to
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php.
This issue affects CheckUser: from * before 1.43.4, 1.44.1.
Published: 2026-02-03T00:59:30.322Z
Updated: 2026-03-03T15:45:22.658Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61651 |
vulnerable | 2026-06-08 07:37:27.879669 |
i18n XSS through Special:CheckUser CheckUser helper
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser/checkuser/checkUserHelper/buildUserElement.Js.
This issue affects CheckUser: from * before 1.44.1.
Published: 2026-02-03T00:53:14.630Z
Updated: 2026-02-03T21:08:33.097Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61648 |
vulnerable | 2026-06-08 07:37:27.878568 |
Stored XSS through system messages in CheckUser
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/ShowIPButton.Vue, modules/ext.CheckUser.TempAccounts/SpecialBlock.Js.
This issue affects CheckUser: from * before 1.44.1.
Published: 2026-02-03T00:19:43.150Z
Updated: 2026-02-03T21:06:55.920Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18611 |
vulnerable | 2026-06-08 05:13:11.692195 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16529 |
vulnerable | 2026-06-08 05:13:08.527513 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.