Approved changes feed: RSS · Atom

cpe:2.3:a:mediawiki:mediawiki:1.27.5:*:*:*:*:*:*:*

part: a version: 1.27.5 update: *

VendorMediawiki (cdb1ca1d-4622-5407-a7d8-3e891579b8c5)
ProductMediawiki (ab97168e-95e7-5d6e-a2ac-f8d27117dc4d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/mediawiki purl2cpe 2026-06-01 10:10:57.618530
pkg:wikimedia/mediawiki purl2cpe 2026-06-01 10:10:57.618531

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0505 vulnerable 2026-06-03 14:37:50.946422 BotPasswords can bypass CentralAuth's account lock
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock
Published: 2018-10-04T20:00:00.000Z
Updated: 2024-09-16T18:48:38.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0504 vulnerable 2026-06-03 14:37:50.945813 Information disclosure in Special:Redirect/logid
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid
Published: 2018-10-04T20:00:00.000Z
Updated: 2024-09-17T00:41:51.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0503 vulnerable 2026-06-03 14:37:50.943575 $wgRateLimits entry for 'user' overrides 'newbie'
Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where contrary to the documentation, $wgRateLimits entry for 'user' overrides that for 'newbie'.
Published: 2018-10-04T20:00:00.000Z
Updated: 2024-09-17T01:30:58.026Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.