This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-6335 →
DEBIAN-CVE-2016-6335
MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which allows re...
Original description
The description as published by the source.
MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head items in the context of a given title, which allows remote attackers to obtain sensitive information via a parse action to api.php.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
mediawiki
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.1-1"}]}]
Debian:13
mediawiki
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.1-1"}]}]
Debian:14
mediawiki
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.1-1"}]}]
References
- advisory security-tracker.debian.org