title: Loading JS from user space where the username is not a registered account is dangerous and should be banned
link: https://phabricator.wikimedia.org/T207603
reference: composer://mediawiki/core
cve: CVE-2019-12471
branches:
1.27.x:
time: 2018-10-21 18:17:35
versions: ['>=1.27.0', '<1.27.6']
1.30.x:
time: 2018-10-21 18:05:57
versions: ['>=1.30.0', '<1.30.2']
1.31.x:
time: 2018-10-21 19:09:31
versions: ['>=1.31.0', '<1.31.2']
|