Unscored DSA-4036-1 7 CVEs

mediawiki - security update

Published Nov 15, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	mediawiki	1:1.27.4-1~deb9u1

Vulnerabilities 7

Unscored —

CVE-2017-8808

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has XSS when the $wgShowExceptionDetails settin…

mediawiki Web / CMS Debian

Nov 15, 2017
Unscored —

CVE-2017-8809 Public exploit

api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulner…

mediawiki Web / CMS Debian

Nov 15, 2017
Unscored —

CVE-2017-8810

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides di…

mediawiki Web / CMS Debian

Nov 15, 2017
Unscored —

CVE-2017-8811

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x befo…

mediawiki Web / CMS Debian

Nov 15, 2017
Unscored —

CVE-2017-8812

MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater th…

mediawiki Web / CMS Debian

Nov 15, 2017
Unscored —

CVE-2017-8814

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to r…

mediawiki Web / CMS Debian

Nov 15, 2017
Unscored —

CVE-2017-8815

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute inje…

mediawiki Web / CMS Debian

Nov 15, 2017