CVE-2017-0370

Опубликовано: 22 нояб. 2014

Источник: redhat

CVSS3: 4.3

EPSS Низкий

Описание

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat OpenShift Enterprise 3	mediawiki123	Affected

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-20

https://bugzilla.redhat.com/show_bug.cgi?id=1569804mediawiki: Improper URL sanitization in Spam blacklist

EPSS

Процентиль: 46%

0.00236

Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVE-2017-0370

CVSS3: 5.3

ubuntu

почти 8 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

CVE-2017-0370

CVSS3: 5.3

nvd

почти 8 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

CVE-2017-0370

CVSS3: 5.3

debian

почти 8 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam b ...

GHSA-ww8x-gvqv-rgpp

CVSS3: 5.3

github

больше 3 лет назад

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

EPSS

Процентиль: 46%

0.00236

Низкий

4.3 Medium

CVSS3