Input validation error in MediaWiki and Debian Linux - CVE-2017-8815
Published: November 15, 2017 / Updated: August 8, 2020
Vulnerability identifier: #VU37971
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-8815
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to manipulate data.
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.
Affected software
MediaWiki
Debian Linux
Arch Linux
Debian Linux
Arch Linux
How to mitigate CVE-2017-8815
Install update from vendor's website.