CVE-2017-0371

MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors…

published February 18, 2022

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style="background-image: attr(title url);" attack within a DIV element that has an attacker-controlled URL in the title attribute.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01568 · 75.1th percentile
Published
2022-02-18T22:29Z
EPSS history
Timeline
  • 18 FEB 22:29Z
    MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors…
    cvelistv5