Description

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax's link parameter.

Remediation

References

CVE-2017-0370

Related Vulnerabilities

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-20035)

Internet Information Services Other Vulnerability (CVE-2002-1181)

WordPress Plugin Booking Privilege Escalation (2.4)

WordPress Plugin Sooqr Search Restricted File Upload (1.1.4)

PHP-Fusion URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-23182)

Severity

Medium

Classification

CVE-2017-0370 CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities