CVE-2017-0370 | BDVDB-2026-99320 Detail

mediawikimediawiki

Description#

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
https://security-tracker.debian.org/tracker/CVE-2017-0370
https://phabricator.wikimedia.org/T48143

Exploit#

No public exploit known

History#

Version 12018-04-13Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.