Cross site request forgery (csrf)

2021-01-2523:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

JSON

The MediaWiki “Report” extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit tokens.

CPENameOperatorVersion
communications_cloud_native_core_network_slice_selection_functioneq1.2.1
communications_pricing_design_centereq12.0.0.4.0
communications_pricing_design_centereq12.0.0.5.0
reporteq< 2021121

Name	Operator	Version
communications_cloud_native_core_network_slice_selection_function	eq	1.2.1
communications_pricing_design_center	eq	12.0.0.4.0
communications_pricing_design_center	eq	12.0.0.5.0
report	eq	< 2021121