Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link.

Remediation

References

CVE-2017-0364

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1982)

Oracle Database Server CVE-2012-0520 Vulnerability (CVE-2012-0520)

Oracle Database Server CVE-2007-5531 Vulnerability (CVE-2007-5531)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3732)

WordPress Plugin AdRotate-Ad manager & AdSense Ads SQL Injection (5.2)

Severity

Medium

Classification

CVE-2017-0364 CWE-601 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities