cpe:/a:mediawiki:mediawiki:1.27.3 cpe:/a:mediawiki:mediawiki:1.28.0 cpe:/a:mediawiki:mediawiki:1.28.1 cpe:/a:mediawiki:mediawiki:1.28.2 cpe:/a:mediawiki:mediawiki:1.29.0 cpe:/a:mediawiki:mediawiki:1.29.1 cpe:/o:debian:debian_linux:9.0 CVE-2017-8811 2017-11-15T03:29:00.720-05:00 2017-11-28T12:11:14.690-05:00 4.3 NETWORK MEDIUM NONE NONE PARTIAL NONE http://nvd.nist.gov 2017-11-19T07:26:17.853-05:00 SECTRACK 1039812 DEBIAN DSA-4036 CONFIRM https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.