CVE-2017-8811: Debian Linux

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.

Affected products

• Debian Debian Linux: version 9.0 only
• Mediawiki Mediawiki: up to and including 1.27.3; version 1.28.0 only; version 1.28.1 only; version 1.28.2 only; version 1.29.0 only; version 1.29.1 only

Published 2017-11-15. Last modified 2026-06-17.