critical9.8
CVE-2017-0372
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
Impact
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.23.15 Versions 1.27.0, 1.27.1, 1.27.2, 1.28.0, 1.28.1 |
| Debian | Debian Linux | Versions 7.0, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.debian.org/861585
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html
- https://phabricator.wikimedia.org/T158689
- https://security-tracker.debian.org/tracker/CVE-2017-0372
- https://bugs.debian.org/861585
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000209.html
- https://phabricator.wikimedia.org/T158689
- https://security-tracker.debian.org/tracker/CVE-2017-0372