CVE-2017-0365

Published: 13 April 2018

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.

Priority

CVSS 3 base score: 4.7

Status

Package	Release	Status
mediawiki Launchpad, Ubuntu, Debian	Upstream	Released (1:1.27.2-1)



	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable (1:1.27.4-3)
	Ubuntu 16.04 LTS (Xenial Xerus)	Does not exist
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was needed)

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.