CVE-2017-8809 api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download…

Description

api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2	Versions not published

Other CVEs of MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2

The 7 CVEs of MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 →

CVE-2017-8810 MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides… Not rated CVE-2017-8811 The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x… Not rated CVE-2017-8812 MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater… Not rated CVE-2017-8814 The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to… Not rated