CVE-2017-0370

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

References

Affected packages

Git / github.com/wikimedia/mediawiki

Affected ranges

Type

GIT

Repo

https://github.com/wikimedia/mediawiki

Events

Introduced

1346cdbba7e7f4560b572a73ecd3625192440e98

Last affected

07ed5049d9381cdd55830d9f296e5514d95348cf

Introduced

758cd9d2371d529450448cdf7eb2f1f6e099cfee

Fixed

1c409c54d4ed3767d216b2a332ae1daeef357909

Introduced

34bc8899bf68e011fde9113c6857853cf91df0b8

Fixed

819c0d21addeed5336244cb9b776fe83a7b2279e

Database specific

{
    "versions": [
        {
            "introduced": "1.23.0"
        },
        {
            "last_affected": "1.23.16"
        },
        {
            "introduced": "1.27.0"
        },
        {
            "fixed": "1.27.2"
        },
        {
            "introduced": "1.28.0"
        },
        {
            "fixed": "1.28.1"
        }
    ]
}

Affected versions

1.*

1.23.0

1.23.1

1.23.10

1.23.11

1.23.12

1.23.13

1.23.14

1.23.15

1.23.16

1.23.2

1.23.3

1.23.4

1.23.5

1.23.6

1.23.7

1.23.8

1.23.9

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0370.json"