cpe:/a:mediawiki:mediawiki:1.27.3 cpe:/a:mediawiki:mediawiki:1.28.0 cpe:/a:mediawiki:mediawiki:1.28.1 cpe:/a:mediawiki:mediawiki:1.28.2 cpe:/a:mediawiki:mediawiki:1.29.0 cpe:/a:mediawiki:mediawiki:1.29.1 cpe:/o:debian:debian_linux:9.0 CVE-2017-8809 2017-11-15T03:29:00.640-05:00 2017-11-28T11:56:08.300-05:00 7.5 NETWORK LOW NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2017-11-19T07:24:18.973-05:00 SECTRACK 1039812 DEBIAN DSA-4036 CONFIRM https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.