Tstarling

**Name of the Vulnerable Software and Affected Versions** LilyPond versions prior to 2.24 **Description** The issue allows attackers to bypass the -dsafe protection mechanism via `output-def-lookup` or `output-def-scope`, as demonstrated by dangerous Scheme code in a .ly file that causes arbitrary code execution during conversion to a different file format. In versions 2.24 and later, safe mode is removed, and the product no longer tries to block code execution when external files are used. **Recommendations** For versions prior to 2.24, update to version 2.24 or later, as safe mode is removed in these versions and the product no longer tries to block code execution when external files are used. As a temporary workaround, consider avoiding the use of `output-def-lookup` and `output-def-scope` until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.31.8 MediaWiki versions 1.32.x MediaWiki versions 1.33.x prior to 1.33.4 MediaWiki versions 1.34.x prior to 1.34.2 **Description** The issue concerns private wikis behind a caching server that use the img auth.php image authorization security feature. Due to mishandled Cache-Control and Vary headers, files may have been cached publicly, allowing any unauthorized user to view them. This results in the potential disclosure of protected information. **Recommendations** For MediaWiki versions prior to 1.31.8, update to version 1.31.8 or later. For MediaWiki versions 1.32.x, update to version 1.33.4 or later, or apply the necessary patches. For MediaWiki versions 1.33.x prior to 1.33.4, update to version 1.33.4 or later. For MediaWiki versions 1.34.x prior to 1.34.2, update to version 1.34.2 or later. As a temporary workaround, consider restricting access to the img auth.php feature until a patch is applied.

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.18.5 MediaWiki versions 1.19.x prior to 1.19.2 Description: The issue allows remote administrators to read a user block reason via a reblock attempt due to improper protection of user block metadata. Recommendations: For MediaWiki versions prior to 1.18.5, update to version 1.18.5 or later. For MediaWiki versions 1.19.x prior to 1.19.2, update to version 1.19.2 or later.

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.18.5 MediaWiki versions 1.19.x prior to 1.19.2 Description: The issue allows remote attackers to bypass GlobalBlocking extension IP address blocking and create an account. Recommendations: For MediaWiki versions prior to 1.18.5, update to version 1.18.5 or later. For MediaWiki versions 1.19.x prior to 1.19.2, update to version 1.19.2 or later.

Name of the Vulnerable Software and Affected Versions: MediaWiki CentralNotice extension versions 1.19.x through 1.19.8 MediaWiki CentralNotice extension versions 1.20.x through 1.20.7 MediaWiki CentralNotice extension versions 1.21.x through 1.21.2 Description: The issue allows remote attackers to authenticate as a created user due to the Cache-Control header setting to cache session cookies when a user is autocreated. Recommendations: For versions 1.19.x through 1.19.8, update to version 1.19.9 or later. For versions 1.20.x through 1.20.7, update to version 1.20.8 or later. For versions 1.21.x through 1.21.2, update to version 1.21.3 or later.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.17.1 **Description** The issue allows remote attackers to obtain sensitive information by leveraging certain functions or extensions, such as the SpecialUpload::ajaxGetExistsWarning function, or extensions like CategoryTree, ExtTab, and InlineEditor, due to a lack of read permission checks for action=ajax requests. **Recommendations** For versions prior to 1.17.1, update to version 1.17.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.15.5 **Description** The issue allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim. This is due to the failure of `api.php` to prevent the use of public caching headers for private data. **Recommendations** For versions prior to 1.15.5, update to version 1.15.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MediaWiki versions prior to 1.15.3 MediaWiki version 1.6.x prior to 1.16.0beta2 **Description** The issue allows remote authenticated users to conduct phishing attacks. This is achieved by arranging for a victim to login to the attacker's account and then execute a crafted user script, related to a "login CSRF" issue. The problem arises from the software not properly handling a correctly authenticated but unintended login attempt. **Recommendations** For MediaWiki versions prior to 1.15.3, update to version 1.15.3 or later. For MediaWiki version 1.6.x prior to 1.16.0beta2, update to version 1.16.0beta2 or later.