tocsin

Debian/mediawiki: critical 9.8

Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.

Action: Upgrade mediawiki to 1:1.27.3-1 or later.

Affected

introducedfixedlast affected
01:1.27.3-1-

Fixed versions

1:1.27.3-1

Sources

published · modified · JSON