CVE-2017-8811
CVE-2017-8811
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.
CVSS 6.1 · Medium · EPSS 1.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
mediawiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2
- Versions
- MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2: Affected
No fix published
mediawiki Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.27.4-1
Update to 1:1.27.4-1
mediawiki Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.27.4-1
Update to 1:1.27.4-1
mediawiki Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.27.4-1
Update to 1:1.27.4-1