Detections
Analytics

Debian dsa-6380 : mediawiki - security update

medium Nessus Plugin ID 325132

Synopsis

The remote Debian host is missing one or more security-related updates.

Description

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6380 advisory.

 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6380-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 05, 2026 https://www.debian.org/security/faq
 - -------------------------------------------------------------------------

 Package : mediawiki CVE ID : CVE-2026-58024 CVE-2026-58025 CVE-2026-58026 CVE-2026-58027 CVE-2026-58028 CVE-2026-58029 CVE-2026-58030 CVE-2026-58032 CVE-2026-58033 CVE-2026-58037

 Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in information disclosure, code execution via unsafe deserialisation or cross-site scripting.

 For the stable distribution (trixie), these problems have been fixed in version 1:1.43.9+dfsg-1~deb13u1.

 We recommend that you upgrade your mediawiki packages.

 For the detailed security status of mediawiki please refer to its security tracker page at:
 https://security-tracker.debian.org/tracker/mediawiki

 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

 Mailing list: [email protected]

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade the mediawiki packages.

See Also

https://packages.debian.org/source/trixie/mediawiki

https://security-tracker.debian.org/tracker/CVE-2026-58024

https://security-tracker.debian.org/tracker/CVE-2026-58025

https://security-tracker.debian.org/tracker/CVE-2026-58026

https://security-tracker.debian.org/tracker/CVE-2026-58027

https://security-tracker.debian.org/tracker/CVE-2026-58028

https://security-tracker.debian.org/tracker/CVE-2026-58029

https://security-tracker.debian.org/tracker/CVE-2026-58030

https://security-tracker.debian.org/tracker/CVE-2026-58032

https://security-tracker.debian.org/tracker/CVE-2026-58033

https://security-tracker.debian.org/tracker/CVE-2026-58037

https://security-tracker.debian.org/tracker/source-package/mediawiki

Plugin Details

Severity: Medium

ID: 325132

File Name: debian_DSA-6380.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 7/6/2026

Updated: 7/6/2026

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.92

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2026-58037

CVSS v3

Risk Factor: Medium

Base Score: 6.1

Temporal Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 5.9

Threat Score: 2.1

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:L

CVSS Score Source: CVE-2026-58025

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:mediawiki-classes, cpe:/o:debian:debian_linux:13.0, p-cpe:/a:debian:debian_linux:mediawiki

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 7/5/2026

Vulnerability Publication Date: 7/1/2026

Reference Information

CVE: CVE-2026-58024, CVE-2026-58025, CVE-2026-58026, CVE-2026-58027, CVE-2026-58028, CVE-2026-58029, CVE-2026-58030, CVE-2026-58032, CVE-2026-58033, CVE-2026-58037