Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-8814
5
MEDIUMCVSS v2
Severity scale
010
Description
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.29.0, = 1.29.1, = 1.28.0, = 1.28.1, = 1.28.2, <= 1.27.3NVD
mediawiki
NPMA JavaScript framework for the MediaWiki API.
NPMA JavaScript framework for the MediaWiki API.= 1.29.0, = 1.29.1, = 1.28.0, = 1.28.1, = 1.28.2, <= 1.27.3NVD
