CVE-2017-0361

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-0361
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0361.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-0361
Downstream
Related
Published
2018-04-13T16:29:00.283Z
Modified
2026-03-14T09:22:18.168736Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain passwords in plaintext.

References

Affected packages

Git / github.com/wikimedia/mediawiki

Affected ranges

Type
GIT
Repo
https://github.com/wikimedia/mediawiki
Events
Introduced
1346cdbba7e7f4560b572a73ecd3625192440e98
Last affected
07ed5049d9381cdd55830d9f296e5514d95348cf
Introduced
758cd9d2371d529450448cdf7eb2f1f6e099cfee
Fixed
1c409c54d4ed3767d216b2a332ae1daeef357909
Introduced
34bc8899bf68e011fde9113c6857853cf91df0b8
Fixed
819c0d21addeed5336244cb9b776fe83a7b2279e
Database specific 
{
    "versions": [
        {
            "introduced": "1.23.0"
        },
        {
            "last_affected": "1.23.16"
        },
        {
            "introduced": "1.27.0"
        },
        {
            "fixed": "1.27.2"
        },
        {
            "introduced": "1.28.0"
        },
        {
            "fixed": "1.28.1"
        }
    ]
}

Affected versions

1.*
1.23.0
1.23.1
1.23.10
1.23.11
1.23.12
1.23.13
1.23.14
1.23.15
1.23.16
1.23.2
1.23.3
1.23.4
1.23.5
1.23.6
1.23.7
1.23.8
1.23.9

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0361.json"