Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.

Remediation

References

CVE-2017-0368

Related Vulnerabilities

WordPress Plugin Advanced post slider Unspecified Vulnerability (2.4.0)

WordPress Plugin Page Builder by SiteOrigin Cross-Site Request Forgery (2.10.15)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-0553)

WordPress Plugin Cache-Control Unspecified Vulnerability (2.2.3)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6113)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2017-0368