CVE-2017-0365

MEDIUM 4.7CVE-2017-0365 · Published 13/04/2018 · updated 17/06/2026

In short

CVE-2017-0365 is a MEDIUM (CVSS 4.7) vulnerability affecting mediawiki (mediawiki).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.9% of all vulnerabilities.
Fix: update to 1.27.2, 1.28.1 or later.

Package	Affected versions	Patched versions
mediawiki mediawiki	`≥ 1.23.0, ≤ 1.23.16≥ 1.27.0, < 1.27.2≥ 1.28.0, < 1.28.1`	`1.27.21.28.1`

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-default configurations.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 1.23.0, ≤ 1.23.16≥ 1.27.0, < 1.27.2≥ 1.28.0, < 1.28.1

1.27.21.28.1

More vulnerabilities in mediawiki

See all →