CVE-2023-45374

creationtimestamp| type| source ---|---|--- 2023-10-09 12:15:58+00:00| seen| https://t.me/cibsecurity/71813...

CVE-2023-45374

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams...

CVE-2023-45374

The CVE-2023-45374 entry concerns the SportsTeams extension for MediaWiki. Affected versions before 1.35.12, 1.36.x–1.39.x before 1.39.5, and 1.40.x before 1.40.1 do not validate the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams, enabling potential CSRF risk. ...