CVE-2017-8815: Debian Linux

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.

Affected products

• Debian Debian Linux: version 9.0 only
• Mediawiki Mediawiki: up to and including 1.27.3; version 1.28.0 only; version 1.28.1 only; version 1.28.2 only; version 1.29.0 only; version 1.29.1 only

Published 2017-11-15. Last modified 2026-06-17.