Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.
References
Link | Resource |
---|---|
https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html | Vendor Advisory |
https://phabricator.wikimedia.org/T151735 | Exploit Issue Tracking Third Party Advisory |
https://security-tracker.debian.org/tracker/CVE-2017-0366 | Third Party Advisory |
Configurations
History
No history.
Information
Published : 2018-04-13 16:29
Updated : 2024-02-04 19:46
NVD link : CVE-2017-0366
Mitre link : CVE-2017-0366
CVE.ORG link : CVE-2017-0366
JSON object : View
Products Affected
mediawiki
- mediawiki
debian
- debian_linux
CWE
CWE-20
Improper Input Validation