CVE-2022-29905

The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...

CVE-2022-29905

creationtimestamp| type| source ---|---|--- 2022-04-29 07:24:46+00:00| seen| https://t.me/cibsecurity/41615...

CVE-2022-29905

CVE-2022-29905 affects the FanBoxes extension for MediaWiki up to version 1.37.2. The vulnerability is a CSRF in Special:UserBoxes, arising from insufficient CSRF protection. Impact per CVSS 3.1 is LOW to MEDIUM with user interaction required. The fix is included in the patch 027ffb0b9d6fe0d82381...