Описание
Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.15.x |
| hardy | ignored | end of life |
| lucid | not-affected | 1.15.x |
| maverick | ignored | end of life |
| natty | not-affected | 1.15.x |
| oneiric | not-affected | 1.15.x |
| precise | not-affected | 1.15.x |
| quantal | not-affected | 1.15.x |
| raring | not-affected | 1.15.x |
| upstream | needs-triage |
Показывать по
EPSS
6.8 Medium
CVSS2
Связанные уязвимости
Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files.
Cross-site request forgery (CSRF) vulnerability in Special:Upload in M ...
Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to hijack the authentication of unspecified victims for requests that upload files.
EPSS
6.8 Medium
CVSS2