Lucene search
RedhatCVELIST:CVE-2013-4306HistoryOct 11, 2013 - 9:00 p.m.
CVE-2013-4306
2013-10-1121:00:00
redhat
www.cve.org
0.004 Low
EPSS
Percentile
72.7%
Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that “perform sensitive write actions” via unspecified vectors.
References
lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html
osvdb.org/96908
seclists.org/oss-sec/2013/q3/553
www.securityfocus.com/bid/62210
bugzilla.wikimedia.org/show_bug.cgi?id=45019
exchange.xforce.ibmcloud.com/vulnerabilities/86893
git.wikimedia.org/commit/mediawiki%2Fextensions%2FCheckUser.git/99ad25d066ce6111e798427cba7f21526827f651
Related
prion
prion
Cross site request forgery (csrf)
2013-10-11 21:55:00
cve
cve
CVE-2013-4306
2013-10-11 21:55:44
nvd
nvd
CVE-2013-4306
2013-10-11 21:55:44
nessus
nessus
MediaWiki < 1.19.8 / 1.20.7 / 1.21.2 Multiple Vulnerabilities
2013-10-03 00:00:00
GLSA-201310-21 : MediaWiki: Multiple vulnerabilities
2013-10-29 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201310-21
2015-09-29 00:00:00
gentoo
gentoo
MediaWiki: Multiple vulnerabilities
2013-10-28 00:00:00