Not rated
CVE-2017-8811 The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x…
Description
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 | Versions not published |
References
- 1039812 www.securitytracker.com
- lists.wikimedia.org lists.wikimedia.org
- DSA-4036 www.debian.org
Timeline
- Published
- Last modified
Other CVEs of MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
The 7 CVEs of MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 →
CVE-2017-8809
api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download…
Not rated
CVE-2017-8810
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides…
Not rated
CVE-2017-8812
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater…
Not rated
CVE-2017-8814
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to…
Not rated