MediaWiki Cross-Site Request Forgery Vulnerability (CNVD-2022-70093)

MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia (MediaWiki) Foundation. The product can be used to deploy internal knowledge management and content management systems.MediaWiki version 1.37.2 and earlier versions contain a cross-site request forgery vulnerability that could be exploited by an attacker to allow CSRF to be used to edit pages that store extended configurations.