Maniphest Security Team (In Progress) But Closed or Stalled

Security Team (In Progress) But Closed or Stalled
Use Results
Edit Query
Hide Query

	N/A
	Informational
	Low
	Medium
	High
	Critical

Closed, Resolved (28)

T280045 Security Readiness Review For Diff Calendar
Security
Security-Team
Security Supplier Assessments
SecTeam-Processed
Fri, Apr 23, 7:07 PM
Assigned: Dsharpe
T278058 CVE-2021-30157: Unescaped messages used in HTML on ChangesList pages (e.g. RecentChanges and Watchlist)
Security
·
Security-Team
Security
Vuln-XSS
MediaWiki-Special-pages
MW-1.31-release
MW-1.35-release
SecTeam-Processed
MW-1.36-notes (1.36.0-wmf.36; 2021-03-23)
MW-1.35-notes
MW-1.31-release-notes
Mar 30 2021, 12:45 AM
Assigned: Grunny
T277336 Element (Matrix client) Bridge Encryption - security review request
Security
Security Supplier Assessments
Security-Team
Fri, Apr 23, 7:09 PM
Assigned: Dsharpe
T274152 Special:AbuseFilter/examine reveals suppressed usernames (CVE-2021-31549)
Security
·
Security-Team
Security
AbuseFilter
Vuln-Infoleak
MW-1.36-notes (1.36.0-wmf.35; 2021-03-16)
Apr 13 2021, 1:17 AM
Assigned: Daimona
T257834 Create apache microsite for security.wikimedia.org
Security-Team
Sep 15 2020, 4:49 PM
Assigned: Reedy
T254925 Bot passwords for officewiki
Wikimedia-Site-requests
Security-Team
Jun 24 2020, 5:53 PM
Assigned: Reedy
T251784 Puppetize Peek for running in prod
Security-Team
May 29 2020, 3:24 PM
Assigned: • chasemp
T249337 Security Issue Access Request for hnowlan
Security
Security-Team
Apr 7 2020, 3:03 PM
Assigned: Dsharpe
T247326 combine security readiness review and security preview boards with third tag
Security Readiness Reviews
Security Preview
Security
Security-Team
secscrum
Project-Admins
Mar 10 2020, 8:34 PM
Assigned: • chasemp
T247197 Investigate orch-chasemp-1.orch.eqiad.wmflabs not allowing SSH connections from cloud-cumin-01
Cloud-VPS
Security-Team
Mar 10 2020, 5:33 PM
Assigned: • chasemp
T246940 Revise and update Concept review service for Security Team
Security-Team
PM
Security Preview
secscrum
Mar 5 2020, 7:59 PM
Assigned: • chasemp
T246602 makeCollapsible allows applying event handler to any CSS selector (CVE-2020-10960)
Security
·
Security-Team
Security
MediaWiki-General
MW-1.31-release-notes
MW-1.34-notes
MW-1.33-notes
MW-1.35-notes (1.35.0-wmf.26; 2020-03-31)
Mar 24 2020, 5:13 PM
Assigned: sbassett
T246489 enable bot passwords on otrswiki
Wikimedia-Site-requests
Security-Team
Jul 19 2020, 6:17 PM
Assigned: Reedy
T245201 Update protect as security issue to use acl*security
Security-Team
Phabricator
Security
Feb 20 2020, 8:07 PM
Assigned: mmodell
T244308 PHP Notice: Undefined offset: 8 from TOTPKey.php
Security
·
Security-Team
MediaWiki-extensions-OATHAuth
Wikimedia-production-error
Security
MW-1.35-notes (1.35.0-wmf.18; 2020-02-04)
Feb 10 2020, 11:27 PM
Assigned: ItSpiderman
T244165 Convert #Security to acl*Security
Security-Team
Phabricator
Security
Feb 20 2020, 8:45 PM
Assigned: • chasemp
T244156 Make NDA task filing more obvious/prominent
Phabricator
Security-Team
Security
Feb 24 2020, 8:23 PM
Assigned: • chasemp
T243608 User scripts shouldn't run on Special:Manage_Two-factor_authentication
Security
·
Security-Team
User-Urbanecm
Security
MW-1.35-notes (1.35.0-wmf.20; 2020-02-18)
Feb 18 2020, 2:48 PM
Assigned: Urbanecm
T242792 Update language in security review SOPs to establish timelines and expectations
Security-Team
PM
Feb 13 2020, 6:03 PM
Assigned: Jcross
T242765 Create 'secteam-discussion' tag
Security-Team
PM
Phabricator
Jan 17 2020, 5:12 PM
Assigned: • chasemp
T242682 Write SOP for incoming email workflow for security@ and security-help@
Security-Team
PM
May 28 2020, 8:50 PM
Assigned: Dsharpe
T242678 Configure security-help@ collab inbox group
Security-Team
PM
May 28 2020, 8:43 PM
Assigned: Dsharpe
T240394 Write and send pre-release announcements for MediaWiki 1.31.7/1.33.3/1.34.1
MediaWiki-Releasing
Security
Security-Team
Mar 25 2020, 7:24 PM
Assigned: Reedy
T232932 User content can redirect the logout button to different URL (CVE-2020-10959)
MediaWiki-Interface
Security
Security-Team
MW-1.35-notes (1.35.0-wmf.26; 2020-03-31)
MW-1.34-notes
Mar 24 2020, 5:32 PM
Assigned: sbassett
T232568 Special:UserRights exposes the existence of hidden users (CVE-2020-25813)
Security
·
MediaWiki-User-management
User-DannyS712
Security
Security-Team
Vuln-Infoleak
MW-1.34-notes
MW-1.35-notes
Aug 11 2020, 9:04 PM
Assigned: DannyS712
T230951 Transfer ownership of mediawiki-security mailman list to Security Team
SRE
Wikimedia-Mailing-lists
Security-Team
Feb 25 2020, 9:10 PM
Assigned: • chasemp
T223654 AbuseFilterCheckMatch API reveals suppressed edits and usernames (CVE-2021-31547)
Vuln-Infoleak
Patch-For-Review
Security
AbuseFilter (Overhaul-2020)
Security-Team
MW-1.36-notes (1.36.0-wmf.35; 2021-03-16)
Apr 13 2021, 12:22 AM
Assigned: Daimona
T71617 AbuseFilter logs suppression deletions (CVE-2021-31546)
Vuln-Infoleak
Security
AbuseFilter (Overhaul-2020)
Patch-For-Review
Security-Team
User-Urbanecm
MW-1.36-notes (1.36.0-wmf.35; 2021-03-16)
Apr 13 2021, 12:47 AM
Assigned: Daimona

Open, Stalled (1)

T180896 Allow functionaries to reset second factor on low-risk accounts
MW-1.34-notes (1.34.0-wmf.1; 2019-04-16)
WMF-Legal
Trust-and-Safety
MediaWiki-extensions-OATHAuth
Security
Security-Team
SecTeam-Processed
Feb 1 2021, 9:57 PM

Security Team (In Progress) But Closed or StalledUse ResultsEdit QueryHide Query

Closed, Resolved (28)

Open, Stalled (1)

Security Team (In Progress) But Closed or Stalled
Use Results
Edit Query
Hide Query