Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2017-0362

MediaWiki before 1.18.1 did not require a CSRF token for the "Mark all pages visited" action on the watchlist.

Source

Severity Medium

Remote Yes

Type Cross-site request forgery

Description

MediaWiki before 1.18.1 did not require a CSRF token for the "Mark all pages visited" action on the watchlist.

AVG-236 mediawiki 1.28.0-1 1.28.1-1 High Fixed

07 Apr 2017 ASA-201704-3 AVG-236 mediawiki High multiple issues

https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html
https://phabricator.wikimedia.org/T150044

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook