Non notée
CVE-2017-8814 The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to…
Description
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 | Versions non publiées |
Références
- 1039812 www.securitytracker.com
- lists.wikimedia.org lists.wikimedia.org
- DSA-4036 www.debian.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
Les 7 CVE de MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 →
CVE-2017-8809
api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download…
Non notée
CVE-2017-8810
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides…
Non notée
CVE-2017-8811
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x…
Non notée
CVE-2017-8812
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater…
Non notée