Описание
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2017-0372
- https://bugs.debian.org/861585
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html
- https://phabricator.wikimedia.org/T158689
- https://security-tracker.debian.org/tracker/CVE-2017-0372
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 8 лет назад
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
CVSS3: 9.8
nvd
больше 8 лет назад
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
CVSS3: 9.8
debian
больше 8 лет назад
Parameters injection in the SyntaxHighlight extension of Mediawiki bef ...