Skip to content

Commit 006ed42

Browse files
Yorick KosterYorick Koster
authored andcommitted
1 parent a7436b6 commit 006ed42

File tree

2 files changed

+3
-4
lines changed

2 files changed

+3
-4
lines changed

documentation/modules/exploit/multi/http/mediawiki_syntaxhighlight.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
## Vulnerable Application
22

3-
Any MediaWiki installation with SyntaxHighlight version 2.0 installed & enabled. This extension ships with the AIO package of MediaWiki 1.27.x & 1.28.x. This issue was supposed to be fixed in MediaWiki version 1.28.1 and version 1.27.2. It appears that the fix was pushed to the git repository, but for some reason it was not included in the release packages.
3+
Any MediaWiki installation with SyntaxHighlight version 2.0 installed & enabled. This extension ships with the AIO package of MediaWiki 1.27.x & 1.28.x. A fix for this issue is included in MediaWiki version 1.28.2 and version 1.27.3.
44

55
## Verification Steps
66

modules/exploits/multi/http/mediawiki_syntaxhighlight.rb

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,8 @@ def initialize(info = {})
1717
1818
This vulnerability affects any MediaWiki installation with SyntaxHighlight version 2.0
1919
installed & enabled. This extension ships with the AIO package of MediaWiki version
20-
1.27.x & 1.28.x. This issue was supposed to be fixed in MediaWiki version 1.28.1
21-
and version 1.27.2. It appears that the fix was pushed to the git repository, but
22-
for some reason it was not included in the release packages.
20+
1.27.x & 1.28.x. A fix for this issue is included in MediaWiki version 1.28.2 and
21+
version 1.27.3.
2322
},
2423
'Author' => 'Yorick Koster',
2524
'License' => MSF_LICENSE,

0 commit comments

Comments
 (0)