CVE-2017-0366 - log back

CVE-2017-0366 created at 25 Sep 2019 19:31:40
Severity
+ High
Remote
+ Remote
Type
+ Cross-site scripting
Description
+ MediaWiki < 1.28.1 did not properly filter the DTD declaration when a SVG file was uploaded, leading to a persistent XSS.
References
+ https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
+ https://phabricator.wikimedia.org/T151735
Notes