CVE Catalog
CVE-2017-8809
CriticalSummary
The api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.
Risk Assessment
An attacker could exploit this vulnerability to download malicious files to users' devices, potentially leading to system compromise.
Recommendation
It is recommended to update MediaWiki to the latest version to mitigate this vulnerability.
Original NVD description (English source)
api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulnerability.