CVE-2017-0370

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside file inclusion syntax’s link parameter.

Date published : 2018-04-13

https://phabricator.wikimedia.org/T48143

https://security-tracker.debian.org/tracker/CVE-2017-0370