Non notée
CVE-2017-8808 MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting…
Description
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 | Versions non publiées |
Références
- 1039812 www.securitytracker.com
- lists.wikimedia.org lists.wikimedia.org
- DSA-4036 www.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Les 7 CVE de MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 →
CVE-2017-8809
api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download…
Non notée
CVE-2017-8810
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides…
Non notée
CVE-2017-8811
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x…
Non notée
CVE-2017-8812
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater…
Non notée