CVE-2017-0372: vulnerability in mediawiki (SyntaxHighlight extension)
Parameters injection in SyntaxHighlight results in multiple vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 11%
from disclosure to weaponsame day
Published on NVDApr 13
metasploitApr 6
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
Affected products
mediawiki · mediawiki (SyntaxHighlight extension)