Lucene search

K
cvelistDebianCVELIST:CVE-2017-0362
HistoryApr 06, 2017 - 12:00 a.m.

CVE-2017-0362 "Mark all pages visited" on the watchlist does not require a CSRF token

2017-04-0600:00:00
debian
raw.githubusercontent.com
1

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the “Mark all pages visited” on the watchlist does not require a CSRF token.

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%