Expand intel coverage and refresh monitoring

08-threat-intel/registry/advisories/mediawiki--82708fa15f.json

@@ -0,0 +1,60 @@
+{
+  "canonical_id": "mediawiki--82708fa15f",
+  "system_id": "mediawiki",
+  "display_name": "MediaWiki",
+  "category": "cms",
+  "advisory_mode": "core",
+  "title": "[MediaWiki-announce] MediaWiki 1.45.0-rc.0 is ready for testing",
+  "summary": "I'm pleased to announce the immediate availability of MediaWiki\n1.45.0-rc.0, the first release candidate for 1.45.0. Download links are at\nthe end of the e-mail. The tag has been signed and pushed to Git.\n\nThis is not a final release, and should not be used for production\nwebsites. Known issues are tracked in Phabricator on the release workboard\n[1]. As with every release of MediaWiki, a large number of changes have\nlanded in the six months of development (over 2300 commits since 1.44.0 was\ncut), and you should read over the preliminary release notes as part of\nassuring yourself of areas that may have issues with your configuration,\nyour skins, and/or your extensions.\n\nAs always, please try out the release candidate in a test environment and\ndo report any issues that you discover. Please use the #MW-1.45-Release [2]\ntag in Phabricator when reporting issues specific to this release, to make\nsure that we find them as quickly as possible.\n\nIt is expected that MediaWiki *1.45 will become final in 2 weeks*. This\ndate may slip if blockers are identified.\n\nPreliminary release notes:\nhttps://gerrit.wikimedia.org/g/mediawiki/core/+/REL1_45/RELEASE-NOTES-1.45\n\nOpen Bugs:\n[1] https://phabricator.wikimedia.org/tag/mw-1.45-release/\n\nBug report form:\n[2]\nhttps://phabricator.wikimedia.org/maniphest/task/edit/form/1/?tags=MW-1.45-Release\n\n**********************************************************************\nDownload:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0-rc.0.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0-rc.0.zip\n\nDownload without bundled extensions:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0-rc.0.tar.gz\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0-rc.0.zip\n\nGPG signatures:\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0-rc.0.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-core-1.45.0-rc.0.zip.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0-rc.0.tar.gz.sig\nhttps://releases.wikimedia.org/mediawiki/1.45/mediawiki-1.45.0-rc.0.zip.sig\n\nPublic keys:\nhttps://www.mediawiki.org/keys/keys.html",
+  "published_at": "Thu, 20 Nov 2025 13:30:34 +0000",
+  "updated_at": "Thu, 20 Nov 2025 13:30:34 +0000",
+  "severity": "unknown",
+  "cvss_score": null,
+  "exploit_status": "unknown",
+  "source_confidence": "official",
+  "official_source_url": "https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/message/S6GM3XLGNYQ3MHVMS5HRGFT4DX7HOZO6/",
+  "secondary_source_urls": [],
+  "aliases": [],
+  "cve_ids": [],
+  "ghsa_ids": [],
+  "osv_ids": [],
+  "affected_versions": [],
+  "fixed_versions": [],
+  "package_name": null,
+  "render_markdown": false,
+  "case_path": null,
+  "secure_code_topics": [
+    "xss-output-encoding",
+    "authz-server-side-recheck",
+    "file-upload-validation",
+    "plugin-extension-trust-policy"
+  ],
+  "status": "triage",
+  "triage_reasons": [
+    "missing affected/fixed version details"
+  ],
+  "verification_status": "triage-manual",
+  "verification_mode": "synthetic",
+  "last_verified_at": null,
+  "last_run_id": null,
+  "evidence_bundle": null,
+  "historical_status": null,
+  "latest_status": null,
+  "browser_evidence": {
+    "required": false,
+    "present": false,
+    "refs": []
+  },
+  "repro_profile_id": "xss-generic",
+  "artifact_mode": "synthetic",
+  "blocked_reason": null,
+  "metadata": {
+    "source_names": [
+      "MediaWiki Announce RSS"
+    ],
+    "source_kinds": [
+      "rss-feed"
+    ],
+    "candidate_count": 1
+  }
+}