NetSight
IP …
medium5.4

CVE-2017-0366

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.

Impact

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.

Affected products

VendorProductAffected versions
MediawikiMediawiki
from 1.23.0 through 1.23.16
from 1.27.0 before 1.27.2
from 1.28.0 before 1.28.1
DebianDebian Linux
Version 7.0

Weakness classification

CWE-20

References