Maniphest Advanced Search

Advanced Search
Use Results
Edit Query
Hide Query

Query

Assigned To

	N/A
	Informational
	Low
	Medium
	High
	Critical

Needs Triage (10)

T358771 Unable to login on iPhone with Passkey Enabled
Security
·
Security
MediaWiki-extensions-OATHAuth
Mobile
Patch-For-Review
Sat, Apr 20, 2:02 AM
T357203 XSS through interface message in UnlinkedWikibase
Security
·
Security-Team
Security
affects-Miraheze
MediaWiki-extensions-UnlinkedWikibase
SecTeam-Processed
Vuln-XSS
Feb 13 2024, 4:45 PM
T348237 Combining throttling edit filters causes multiple false positives for single IP edits
Security
·
AbuseFilter
SecTeam-Processed
Oct 9 2023, 8:38 AM
T307991 SecurityError: Attempt to use history.replaceState() more than 100 times per 30 seconds
Security
·
Wikimedia-production-error
MediaWiki-Recent-changes
Growth-Team
JavaScript
Vuln-DoS
Security
SecTeam-Processed
Dec 15 2022, 11:35 PM
T304985 Throttling mitigations against password sprays attacks
Security
·
Security
MediaWiki-Core-AuthManager
SecTeam-Processed
Apr 4 2022, 3:40 PM
T289373 Create maintenance script to add/remove global blocks
Security
·
Security
GlobalBlocking
SecTeam-Processed
Patch-For-Review
User-Tks4Fish
Feb 2 2022, 7:56 PM
Assigned: Tks4Fish
T285329 Anyone can display whatever title they want using TemplateStyles
Security
·
MediaWiki-Parser
TemplateStyles
Security
SecTeam-Processed
Nov 16 2023, 6:35 AM
T284274 action=history with a high limit like >= 2000, can be slow and might timeout
Security
·
Security
MediaWiki-Page-history
Vuln-DoS
Platform Team Workboards (Clinic Duty Team)
Wikimedia-Performance-publish
Aug 6 2023, 10:42 PM
T257100 Set up automated/regular end-to-end testing of potential and past security issues
Security
·
Security
Technical-Tool-Request
Aug 16 2022, 7:28 PM
T257070 Standardise setup of Loggers
Security
·
Security
MediaWiki-Debug-Logger
Sep 16 2021, 2:02 PM

High (1)

T208008 Consumer owner-only oauth proposals should require reauth
Security
·
MediaWiki-extensions-OAuth
Security
Sustainability (Incident Followup)
Patch-Needs-Improvement
Apr 2 2023, 1:08 AM

Medium (3)

T361482 Issues changing password & logging in (primarily with Android Wikipedia mobile app)
Security
·
Mobile
Wikipedia-Android-App-Backlog
SecTeam-Processed
Wed, Apr 17, 6:51 PM
T361452 Foreground skin: stored XSS via MediaWiki:Sidebar
Security
·
Security
Vuln-XSS
MediaWiki-skins-Foreground
SecTeam-Processed
security-bug
Sun, Apr 7, 10:45 PM
T245110 Should per user `Echo-whitelist` pages be protected?
Security
·
User-DannyS712
Security
Notifications
MediaWiki-User-management
Growth-Team
Growth-Team-Filtering
Nov 3 2021, 7:01 PM

Low (9)

T361328 Password to keystore of java certificates needs changing
Security
·
Security
SecTeam-Processed
Wed, Apr 3, 6:56 PM
T356971 Rename help key to help-raw in HTMLForm and deprecate old key name
Security
·
Security
Vuln-XSS
MediaWiki-HTMLForm
SecTeam-Processed
good first task
Feb 17 2024, 9:07 PM
T356768 DOM Clobbering Risk in WikiBooks
Security
·
Security-Team
Security
SecTeam-Processed
Vuln-XSS
Patch-For-Review
MW-1.42-notes (1.42.0-wmf.25; 2024-04-02)
Tue, Mar 26, 8:00 PM
Assigned: sbassett
T348067 Add prefix to novaobserver password to make it obvious it's intended to be public
Security
·
Security
cloud-services-team
Cloud-VPS
Oct 12 2023, 8:18 AM
T294151 Reports that the ua-parser-js npm package has been "hijacked" into a coinminer (indirect dependency of Wikibase)
Security
·
Security
Wikidata-Bridge
Wikidata
[DEPRECATED] wdwb-tech
SecTeam-Processed
Mar 5 2024, 12:19 PM
T290493 Cross Origin Resource Sharing Misconfiguration | Lead to sensitive information. in "diff.wikimedia.org"
Security
·
Security
SecTeam-Processed
Diff-blog
Privacy
Privacy Engineering
Sep 25 2023, 7:06 PM
T286416 21 public Python tool configuration files
Security
·
Security
Toolforge
Vuln-Infoleak
SecTeam-Processed
cloud-services-team
Jan 18 2023, 6:40 PM
T259210 LilyPond safe mode escape due to output-def-lookup and output-def-scope (CVE-2020-17354)
Security
·
Security-Team
Security
MediaWiki-extensions-Score
Mar 5 2023, 11:16 PM
T258322 Open redirect in wikis that use http://domain.tld/index.php format
Security
·
Security
MediaWiki-General
Platform Engineering
Vuln-OpenRedirect
SecTeam-Processed
Aug 4 2021, 6:39 PM

Lowest (3)

T321802 action=growthmentordashboardupdatedata ignores blocks
Security
·
Security
GrowthExperiments-MentorDashboard
GrowthExperiments-Mentorship
Growth-Team
SecTeam-Processed
Vuln-MissingAuthz
Jul 31 2023, 6:05 PM
T299855 XTools ArticleInfo gadget should not execute WMCS HTML
Security
·
Security
XTools
SecTeam-Processed
Jan 24 2022, 10:35 PM
T242821 Separate access to tools and test features from ability to view private filters
Security
·
User-DannyS712
MediaWiki-User-management
Security
AbuseFilter (Overhaul-2020)
MW-1.36-notes (1.36.0-wmf.32; 2021-02-23)
SecTeam-Processed
Oct 6 2021, 10:49 AM

Advanced SearchUse ResultsEdit QueryHide Query

Needs Triage (10)

High (1)

Medium (3)

Low (9)

Lowest (3)

Advanced Search
Use Results
Edit Query
Hide Query