Description

Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory default to system tmp directory is insecure.

Remediation

References

CVE-2017-0367

Related Vulnerabilities

WordPress Plugin MAC PHOTO GALLERY 'upload-file.php' Arbitrary File Upload (2.7)

WordPress 3.9.x PHP Object Injection (3.9 - 3.9.33)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-0819)

WordPress Plugin HAL Cross-Site Scripting (2.1.1)

WordPress Plugin Under Construction/Maintenance Mode from Acurax Multiple Unspecified Vulnerabilities (2.5.2)

Severity

High

Classification

CVE-2017-0367 CWE-668 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities