Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-8812
5
MEDIUMCVSS v2
Severity scale
010
Description
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.29.0, = 1.29.1, = 1.28.0, = 1.28.1, = 1.28.2, <= 1.27.3NVD
mediawiki
NPMA JavaScript framework for the MediaWiki API.
NPMA JavaScript framework for the MediaWiki API.= 1.29.0, = 1.29.1, = 1.28.0, = 1.28.1, = 1.28.2, <= 1.27.3NVD
