CVE-2017-0367

Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure.

References

Affected packages

Git / github.com/wikimedia/mediawiki

Affected ranges

Type

GIT

Repo

https://github.com/wikimedia/mediawiki

Events

Introduced

758cd9d2371d529450448cdf7eb2f1f6e099cfee

Fixed

1c409c54d4ed3767d216b2a332ae1daeef357909

Introduced

34bc8899bf68e011fde9113c6857853cf91df0b8

Fixed

819c0d21addeed5336244cb9b776fe83a7b2279e

Database specific

{
    "versions": [
        {
            "introduced": "1.27.0"
        },
        {
            "fixed": "1.27.2"
        },
        {
            "introduced": "1.28.0"
        },
        {
            "fixed": "1.28.1"
        }
    ]
}

Affected versions

1.*

1.27.0

1.27.1

1.28.0

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0367.json"