PT-2018-5123

CVE-2017-0364

Published

2017-04-16

Updated

2018-05-14

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mediawiki versions prior to 1.28.1 Mediawiki versions prior to 1.27.2 Mediawiki versions prior to 1.23.16

Description The issue concerns a flaw in the Special:Search feature, which allows redirects to any interwiki link.

Recommendations For versions prior to 1.28.1, update to version 1.28.1 or later. For versions prior to 1.27.2, update to version 1.27.2 or later. For versions prior to 1.23.16, update to version 1.23.16 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Bawolff

Vendors

Affected products

Weakness enumeration

CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')

Related identifiers

CVE-2017-0364