Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.

Description

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2

  • MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2affected

References