CVE-2017-0365

2018-04-1316:29:00

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

38.3%

JSON

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.

OSVersionArchitecturePackageVersionFilename
Debian12allmediawiki< 1:1.27.2-1mediawiki_1:1.27.2-1_all.deb
Debian11allmediawiki< 1:1.27.2-1mediawiki_1:1.27.2-1_all.deb
Debian999allmediawiki< 1:1.27.2-1mediawiki_1:1.27.2-1_all.deb
Debian13allmediawiki< 1:1.27.2-1mediawiki_1:1.27.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mediawiki	< 1:1.27.2-1	mediawiki_1:1.27.2-1_all.deb
Debian	11	all	mediawiki	< 1:1.27.2-1	mediawiki_1:1.27.2-1_all.deb
Debian	999	all	mediawiki	< 1:1.27.2-1	mediawiki_1:1.27.2-1_all.deb
Debian	13	all	mediawiki	< 1:1.27.2-1	mediawiki_1:1.27.2-1_all.deb