Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-0366

SVG filter evasion using default attribute values in DTD declaration

Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mediawiki mediawiki

  • n/aaffected

References