Threats affecting pkg:github/wikimedia/mediawiki/extensions/ExternalData

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 1.2%	CVE-2026-100382Wikimedia Foundation Mediawiki – ExternalData Extension · OS Command Injection Critical10.0EPSS 1.2%2026-09-25CVE Database V5CVE-2026-100382 CVE-2026-100382 is a critical OS Command Injection vulnerability in the Wikimedia Foundation's Mediawiki ExternalData Extension. It affects all versions prior to 3.7. The flaw allows improper neutralization of special elements used in OS commands, potentially enabling remote attackers to execute arbitrary OS commands without authentication. EPSS 1.2%Vulnerability CWE-78	CVE Database V5	2026-09-25

Page 1 of 1 · 1 duplicate CVE record merged