CVE-2017-0368

MEDIUM 5.3CVE-2017-0368 · Published 13/04/2018 · updated 17/06/2026

In short

CVE-2017-0368 is a MEDIUM (CVSS 5.3) vulnerability affecting mediawiki (mediawiki).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.8% of all vulnerabilities.
Fix: update to 1.27.2, 1.28.1 or later.

Package	Affected versions	Patched versions
mediawiki mediawiki	`≥ 1.23.0, ≤ 1.23.16≥ 1.27.0, < 1.27.2≥ 1.28.0, < 1.28.1`	`1.27.21.28.1`

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 1.23.0, ≤ 1.23.16≥ 1.27.0, < 1.27.2≥ 1.28.0, < 1.28.1

1.27.21.28.1

More vulnerabilities in mediawiki

See all →