Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-0370

Опубликовано: 13 апр. 2018
Источник: debian
EPSS Низкий

Описание

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mediawikifixed1:1.27.2-1package
mediawikiend-of-lifewheezypackage

Примечания

  • https://phabricator.wikimedia.org/T48143

  • https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html

EPSS

Процентиль: 70%
0.01429
Низкий

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 8 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

CVSS3: 4.3
redhat
больше 11 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

CVSS3: 5.3
nvd
больше 8 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

CVSS3: 5.3
github
больше 4 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

EPSS

Процентиль: 70%
0.01429
Низкий