Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-0504

Fixed in a distro release EPSS 3%

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains an information disclosure flaw in the Special:Redirect/logid

Published 2018-10-04 · CVE record · OSV

Products: mediawiki

Fixed upstream

EcosystemPackageFixed in
Packagistmediawiki/core1.27.5
Packagistmediawiki/core1.29.3
Packagistmediawiki/core1.30.1
Packagistmediawiki/core1.31.1

Distro releases

ReleasePackageFixed in
Debian 12mediawiki1:1.31.1-1
Debian 13mediawiki1:1.31.1-1
Debian 14mediawiki1:1.31.1-1
Debian 9mediawiki1:1.27.5-1~deb9u1
Red Hat openshift 3.10mediawiki0:1.27.7-1.el7
Red Hat openshift 3.10mediawiki-doc0:1.27.7-1.el7
Red Hat openshift 3.9mediawiki1230:1.23.17-1.el7
Red Hat openshift 3.9mediawiki123-doc0:1.23.17-1.el7
Ubuntu 18.04 LTSmediawikino fix