CVE-2013-4306 in MediaWiki

Résumé (Anglaise)

Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that "perform sensitive write actions" via unspecified vectors.

Réserver

12/06/2013

Divulgation

11/10/2013

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
10134	MediaWiki CheckUser Extension ApiQueryCheckUser.php getAllowedParams cross site request forgery	352	Preuve de concept	Correctif officiel	CVE-2013-4306