tocsin

Debian/mediawiki: high 8.1

Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the d

Action: Upgrade mediawiki to 1:1.35.7-1 or later.

Affected

introducedfixedlast affected
01:1.35.7-1-

Fixed versions

1:1.35.7-1

Sources

published · modified · JSON