CVE-2012-5394 in MediaWiki
Summary
Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
10/17/2012
Disclosure
12/13/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65743 | MediaWiki CentralAuth Extension cross-site request forgery | 352 | Not defined | Official fix | CVE-2012-5394 |