{"id":"CVE-2017-0371","details":"MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors via a style=\"background-image: attr(title url);\" attack within a DIV element that has an attacker-controlled URL in the title attribute.","modified":"2026-07-08T12:54:23.484098Z","published":"2022-02-18T23:15:07.843Z","references":[{"type":"FIX","url":"https://phabricator.wikimedia.org/T140591"},{"type":"FIX","url":"https://phabricator.wikimedia.org/T68404"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wikimedia/mediawiki","events":[{"introduced":"0"},{"fixed":"07ed5049d9381cdd55830d9f296e5514d95348cf"},{"introduced":"ebb163995a27caca9c9b146f94a6c8058fe727b6"},{"fixed":"1c409c54d4ed3767d216b2a332ae1daeef357909"},{"introduced":"34bc8899bf68e011fde9113c6857853cf91df0b8"},{"fixed":"819c0d21addeed5336244cb9b776fe83a7b2279e"}],"database_specific":{"cpe":"cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.23.16"},{"introduced":"1.24.0"},{"fixed":"1.27.2"},{"introduced":"1.28.0"},{"fixed":"1.28.1"}],"source":"CPE_RANGE"}}],"versions":["1.28.0","1.23.15","1.27.1","1.23.14","1.27.0","1.27.0-rc.1","1.27.0-rc.0","1.23.13","1.23.12","1.23.11","1.23.10","1.23.9","1.23.8","1.23.7","test-hashar-for-ci","1.23.6","1.23.5","1.23.4","1.23.3","1.23.2","1.23.1","1.23.0","1.23.0-rc.3","1.23.0-rc.2","1.23.0-rc.1","1.23.0rc0","1.6.0","1.5.0beta4","1.5.0beta3","1.5.0beta2","1.5.0beta1","1.5.0alpha2","1.5.0alpha1","1.3.0beta1","1.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0371.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}