MediaWiki 1.28.0
Approved changes feed: RSS · Atom
cpe:2.3:a:mediawiki:mediawiki:1.28.0:*:*:*:*:*:*:*
part: a version: 1.28.0 update: *
| Vendor | Mediawiki (cdb1ca1d-4622-5407-a7d8-3e891579b8c5) |
|---|---|
| Product | Mediawiki (ab97168e-95e7-5d6e-a2ac-f8d27117dc4d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wikimedia/mediawiki |
purl2cpe | 2026-06-01 10:10:57.618539 |
pkg:wikimedia/mediawiki |
purl2cpe | 2026-06-01 10:10:57.618540 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8815 |
vulnerable | 2026-06-08 05:10:08.937487 |
Details available
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.
Published: 2017-11-15T08:00:00.000Z
Updated: 2024-08-05T16:48:21.919Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8814 |
vulnerable | 2026-06-08 05:10:08.937015 |
Details available
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."
Published: 2017-11-15T08:00:00.000Z
Updated: 2024-08-05T16:48:21.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8812 |
vulnerable | 2026-06-08 05:10:08.936336 |
Details available
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.
Published: 2017-11-15T08:00:00.000Z
Updated: 2024-08-05T16:48:22.653Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8811 |
vulnerable | 2026-06-08 05:10:08.935771 |
Details available
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.
Published: 2017-11-15T08:00:00.000Z
Updated: 2024-08-05T16:48:22.605Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8810 |
vulnerable | 2026-06-08 05:10:08.935138 |
Details available
MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2, when a private wiki is configured, provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests.
Published: 2017-11-15T08:00:00.000Z
Updated: 2024-08-05T16:48:22.197Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8809 |
vulnerable | 2026-06-08 05:10:08.934651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8808 |
vulnerable | 2026-06-08 05:10:08.931665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-0372 |
vulnerable | 2026-06-08 05:08:26.042427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.