CVE-2012-5394 in MediaWiki
요약 (영어)
Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2012. 10. 17.
공개
2013. 12. 13.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 65743 | MediaWiki CentralAuth Extension 교차 사이트 요청 위조 | 352 | 정의되지 않음 | 공식 수정 | CVE-2012-5394 |