CVE-2017-0366

CVE-2017-0366 affects MediaWiki prior to 1.28.1, 1.27.2, and 1.23.16, where a flaw in how default attributes in SVG DTD declarations are handled allows evading SVG filters. Root cause: incorrect SVG filter handling enabling bypass of filters in SVG contexts. Impact: as stated, evading graphical f...

Fedora 25 : mediawiki (2017-3fb95ed01f)

T109140 T122209 Special:UserLogin and Special:Search allow redirect to interwiki links. CVE-2017-0363, CVE-2017-0364 - T144845 XSS in SearchHighlighter::highlightText when $wgAdvancedSearchHighlighting is true. CVE-2017-0365 - T125177 API parameters may now be marked as 'sensitive' to keep their...