| title:     Loading JS from user space where the username is not a registered account is dangerous and should be banned
link:      https://phabricator.wikimedia.org/T207603
reference: composer://mediawiki/core
cve:       CVE-2019-12471
branches:
    1.27.x:
        time: 2018-10-21 18:17:35
        versions: ['>=1.27.0', '<1.27.6']
    1.30.x:
        time: 2018-10-21 18:05:57
        versions: ['>=1.30.0', '<1.30.2']
    1.31.x:
        time: 2018-10-21 19:09:31
        versions: ['>=1.31.0', '<1.31.2']
 |