CVE-2017-0367

MediaWiki before 1.28.1 / 1.27.2 is affected by an insecure use of a temporary directory for LocalisationCache, causing insecure handling when the directory defaults to the system temp directory. Root cause: unsafe temporary-directory usage. Impact (as stated/implied): partial confidentiality, in...

Fedora 25 : mediawiki (2017-3fb95ed01f)

T109140 T122209 Special:UserLogin and Special:Search allow redirect to interwiki links. CVE-2017-0363, CVE-2017-0364 - T144845 XSS in SearchHighlighter::highlightText when $wgAdvancedSearchHighlighting is true. CVE-2017-0365 - T125177 API parameters may now be marked as 'sensitive' to keep their...