Lucene search
GoogleOSV:CVE-2024-40603HistoryJul 07, 2024 - 12:15 a.m.
CVE-2024-40603
2024-07-0700:15:10
Google
osv.dev
3
mediawiki
csrf
vulnerability
articleratings
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6.8
Confidence
High
An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request.
References
Related
cvelist
cvelist
CVE-2024-40603
2024-07-06 00:00:00
osv
osv
BIT-mediawiki-2024-40603
2024-07-10 07:24:59
cve
cve
CVE-2024-40603
2024-07-07 00:15:10
nvd
nvd
CVE-2024-40603
2024-07-07 00:15:10
vulnrichment
vulnrichment
CVE-2024-40603
2024-07-06 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
AI Score
6.8
Confidence
High
Related for OSV:CVE-2024-40603