Non notée
CVE-2017-8811 The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x…
Description
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 | Versions non publiées |
Références
- 1039812 www.securitytracker.com
- lists.wikimedia.org lists.wikimedia.org
- DSA-4036 www.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Les 7 CVE de MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 →
CVE-2017-8809
api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download…
Non notée
CVE-2017-8810
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides…
Non notée
CVE-2017-8812
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater…
Non notée
CVE-2017-8814
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to…
Non notée