CVE-2017-0366
Published: 13 April 2018
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration.
Priority
Medium
CVSS 3 base score: 5.4
Status
| Package | Release | Status |
|---|---|---|
|
mediawiki Launchpad, Ubuntu, Debian |
artful |
Ignored
(reached end-of-life)
|
| bionic |
Not vulnerable
(1:1.27.4-3)
|
|
| cosmic |
Not vulnerable
(1:1.27.4-3)
|
|
| disco |
Not vulnerable
(1:1.27.4-3)
|
|
| precise |
Does not exist
(precise was needs-triage)
|
|
| trusty |
Does not exist
(trusty was needed)
|
|
| upstream |
Released
(1:1.27.2-1)
|
|
| xenial |
Does not exist
|
|
| yakkety |
Ignored
(reached end-of-life)
|
|
| zesty |
Ignored
(reached end-of-life)
|