CVE-2017-0371 | BDVDB-2026-170245 Detail

Description#

MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title url);" attack within a DIV element that has an attacker-controlled URL in the title attribute.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://phabricator.wikimedia.org/T140591
https://phabricator.wikimedia.org/T68404

Exploit#

No public exploit known

History#

Version 12022-02-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.