CVE-2017-0363

All Frameworks › MediaWiki › CWE-Other › CVE-2017-0363

CVE-2017-0363

State: PUBLISHED · Published: 2018-04-13 · Updated: 2024-09-16 · Assigner: debian

Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to external sites.

CWE

(none)

Affected

mediawiki / mediawiki — v=n/a [affected]

CVSS

(none)

References

https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html mailing-list, x_refsource_MLIST
https://phabricator.wikimedia.org/T109140 x_refsource_CONFIRM
https://security-tracker.debian.org/tracker/CVE-2017-0363 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2017/0xxx/CVE-2017-0363.json