CVE-2017-0370

State: PUBLISHED · Published: 2018-04-13 · Updated: 2024-09-16 · Assigner: debian

Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

CWE

(none)

Affected

mediawiki / mediawiki — v=n/a [affected]

CVSS

(none)

References

https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html mailing-list, x_refsource_MLIST
https://security-tracker.debian.org/tracker/CVE-2017-0370 x_refsource_CONFIRM
https://phabricator.wikimedia.org/T48143 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2017/0xxx/CVE-2017-0370.json