Rhinosf1

The issue is related to a Path Traversal vulnerability, which allows improper limitation of a pathname to a restricted directory. This vulnerability exists in The Wikimedia Foundation Mediawiki - CSS Extension, enabling Path Traversal.

An issue was discovered in MediaWiki where HTMLUserTextField exposes the existence of hidden users.

The issue concerns the CreateRedirect extension for MediaWiki, where it fails to properly check user permissions for editing the target page. This could allow unauthorized or blocked users to edit pages they should not have access to.

CreateWiki is Miraheze's MediaWiki extension for requesting and creating wikis. Without the patch for this issue, anonymous comments can be made using Special:RequestWikiQueue when sent directly via POST. A patch for this issue is available in the `master` branch of CreateWiki's GitHub repository.

An issue was discovered in a parser function related to loop control, which allowed for an infinite loop and php-fpm hang within the Loops extension because `egLoopsCountLimit` is mishandled. This could lead to memory exhaustion.

The issue is related to an uncontrolled resource consumption vulnerability in the GlobalNewFiles mediawiki extension. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load balancing and a lack of an appropriate index.

An issue was discovered that allows a malicious actor to introduce XSS payloads into various layers via crafted configuration variables.

The issue concerns the sopel-channelmgnt plugin for sopel, where restrictions around the removal of the bot using the kick/kickban command could be bypassed on some IRC servers when kicking multiple users at once. It is also believed that it may have been possible to remove users from other channels, but due to the complexity of IRC and following RfCs, there is no proof of concept for this. Freenode is not affected.

The issue allowed unprivileged users to access steward commands on the IRC interface by impersonating the nickname of a privileged user, as no login check was performed.