QwikSec

Security Database

CVE

CWE

Training

CVE-2017-8815

Published: Nov 15, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.

Vendor	Product	Versions
n/a	MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2	affected `MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2`

References

vdb-entry

x_refsource_SECTRACK

https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.