CVE-2017-0363: Special:UserLogin?returnto=interwiki:foo will redirect to external sites
Published Apr 13, 2018
·Updated
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to external sites.
Affected Software
5 affected componentsFixes available
MediaWiki MediaWiki>=1.23.0<=1.23.16
MediaWiki MediaWiki>=1.27.0<1.27.2
MediaWiki MediaWiki>=1.28.0<1.28.1
Debian Debian Linux=7.0
debian/mediawiki
1:1.35.13-1+deb11u21:1.35.13-1+deb11u61:1.39.17-1~deb12u11:1.43.6+dfsg-1~deb13u11:1.43.6+dfsg-2
Event History
Apr 13, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Feb 19, 2026
Data Sourced
via Debian·07:26 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-0363?
CVE-2017-0363 is considered a medium risk vulnerability due to its potential for redirects to external sites.
2
How do I fix CVE-2017-0363?
To fix CVE-2017-0363, upgrade MediaWiki to version 1.28.1 or later, or version 1.27.2 or later.
3
What versions of MediaWiki are affected by CVE-2017-0363?
CVE-2017-0363 affects MediaWiki versions before 1.28.1, 1.27.2, and 1.23.16.
4
Can CVE-2017-0363 lead to security issues?
Yes, CVE-2017-0363 can lead to phishing attacks through unintended redirection to external websites.
5
Is there a known exploit for CVE-2017-0363?
While no specific exploit has been publicly documented for CVE-2017-0363, the flaw creates a risk for potential exploitation.