CVE-2017-0364

All Frameworks › MediaWiki › CWE-Other › CVE-2017-0364

CVE-2017-0364

State: PUBLISHED · Published: 2018-04-13 · Updated: 2024-09-16 · Assigner: debian

Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link.

CWE

(none)

Affected

mediawiki / mediawiki — v=n/a [affected]

CVSS

(none)

References

https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html mailing-list, x_refsource_MLIST
https://security-tracker.debian.org/tracker/CVE-2017-0364 x_refsource_CONFIRM
https://phabricator.wikimedia.org/T122209 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2017/0xxx/CVE-2017-0364.json