Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability - CVE-2017-0367 - Vulnerability Database
MediaWiki

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability - CVE-2017-0367

High
Reference: CVE-2017-0367
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-0367
Title: MediaWiki Exposure of Resource to Wrong Sphere Vulnerability
Overview:

Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory where having LocalisationCache directory default to system tmp directory is insecure.