Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-8808
4.3
MEDIUMCVSS v2
Severity scale
010
Description
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails setting is false and the browser sends non-standard URL escaping.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.29.0, = 1.29.1, = 1.28.0, = 1.28.1, = 1.28.2, <= 1.27.3NVD
mediawiki
NPMA JavaScript framework for the MediaWiki API.
NPMA JavaScript framework for the MediaWiki API.= 1.29.0, = 1.29.1, = 1.28.0, = 1.28.1, = 1.28.2, <= 1.27.3NVD
