3 matches found
CVE-2022-29905
The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...
4.3CVSS6.9AI score0.00375EPSS
SaveExploits1References1
CVE-2022-29905
creationtimestamp| type| source ---|---|--- 2022-04-29 07:24:46+00:00| seen| https://t.me/cibsecurity/41615...
4.3CVSS4.6AI score0.00375EPSS
SaveExploits1References1
CVE-2022-29905
CVE-2022-29905 affects the FanBoxes extension for MediaWiki up to version 1.37.2. The vulnerability is a CSRF in Special:UserBoxes, arising from insufficient CSRF protection. Impact per CVSS 3.1 is LOW to MEDIUM with user interaction required. The fix is included in the patch 027ffb0b9d6fe0d82381...
4.3CVSS4.7AI score0.00375EPSS
SaveExploits1References2Affected Software1
20