cpe:/a:mediawiki:mediawiki:1.27.3 cpe:/a:mediawiki:mediawiki:1.28.0 cpe:/a:mediawiki:mediawiki:1.28.1 cpe:/a:mediawiki:mediawiki:1.28.2 cpe:/a:mediawiki:mediawiki:1.29.0 cpe:/a:mediawiki:mediawiki:1.29.1 cpe:/o:debian:debian_linux:9.0 CVE-2017-8812 2017-11-15T03:29:00.750-05:00 2019-10-02T20:03:26.223-04:00 5.0 NETWORK LOW NONE NONE PARTIAL NONE http://nvd.nist.gov 2017-11-19T07:27:09.417-05:00 SECTRACK 1039812 DEBIAN DSA-4036 CONFIRM https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-November/000216.html MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows remote attackers to inject > (greater than) characters via the id attribute of a headline.