930 matches found
CVE-2024-47846 Special:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protection
Cross-Site Request Forgery CSRF vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1...
CVE-2024-47846
CVE-2024-47846 affects the MediaWiki Cargo extension for MediaWiki 3.6.x prior to 3.6.1. The issue is a Cross‑Site Request Forgery (CSRF) vulnerability in Special:DeleteCargoTable and Special:SwitchCargoTable due to insufficient CSRF protection / origin verification on delete actions. The root ca...
CVE-2024-47846 Special:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protection
Cross-Site Request Forgery CSRF vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows Cross Site Request Forgery.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1...
CVE-2024-47849 Backticks can allow the usage of not-allowed SQL functions
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Injection.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1...
CVE-2024-47849
CVE-2024-47849 affects the MediaWiki extension Cargo for MediaWiki 3.6.x prior to 3.6.1, caused by improper neutralization in SQL commands leading to SQL Injection. Public sources concur on versions to fix: update Cargo to 3.6.1 or later (Snyk lists 3.7+ as the remediation). Documented impact is ...
CVE-2024-47849 Backticks can allow the usage of not-allowed SQL functions
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation Mediawiki - Cargo allows SQL Injection.This issue affects Mediawiki - Cargo: from 3.6.X before 3.6.1...
MediaWiki Cargo 安全漏洞
MediaWiki Cargo is an extension of the American Wikimedia MediaWiki Foundation. A security vulnerability exists in MediaWiki Cargo version 3.6.X prior to 3.6.1, which stems from the presence of a SQL injection vulnerability...
PT-2024-32851 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: Mediawiki - Cargo versions 3.6.X before 3.6.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially leading to...
cargo-audit-0.20.0~git66.972ac93-3.1 on GA media (moderate)
cargo-audit-0.20.0git66.972ac93-3.1 on GA media Announcement ID: openSUSE-SU-2024:14363-1 Rating: moderate Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2024-45405 SUSE : 7...
obs-service-cargo-1.3.6-5.1 on GA media (moderate)
obs-service-cargo-1.3.6-5.1 on GA media Announcement ID: openSUSE-SU-2024:14364-1 Rating: moderate Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2024-45405 SUSE : 7...
OPENSUSE-SU-2024:14364-1 obs-service-cargo-1.3.6-5.1 on GA media
These are all security issues fixed in the obs-service-cargo-1.3.6-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14363-1 cargo-audit-0.20.0~git66.972ac93-3.1 on GA media
These are all security issues fixed in the cargo-audit-0.20.0git66.972ac93-3.1 package on the GA media of openSUSE Tumbleweed...
cargo-c-0.10.3~git0.ee7d7ef-2.1 on GA media (moderate)
cargo-c-0.10.3git0.ee7d7ef-2.1 on GA media Announcement ID: openSUSE-SU-2024:14359-1 Rating: moderate Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2024-45405 SUSE : 7...
OPENSUSE-SU-2024:14359-1 cargo-c-0.10.3~git0.ee7d7ef-2.1 on GA media
These are all security issues fixed in the cargo-c-0.10.3git0.ee7d7ef-2.1 package on the GA media of openSUSE Tumbleweed...
Fedora: Security Advisory (FEDORA-2023-d88521bfc5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-53685bdcb6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2023-6f419dc91b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-M8RP-VV92-46C7 vulnerabilities
Vulnerabilities for packages: cargo-audit, cargo-c, starship...
