Lucene search
+L

4 matches found

Mend
Mend
•added 2021/01/25 10:45 p.m.•6 views

CVE-2021-21275

The MediaWiki "Report" extension has a Cross-Site Request Forgery CSRF vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit...

6.9CVSS0.00725EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/01/25 10:45 p.m.•39 views

CVE-2021-21275 CSRF in MediaWiki Report extension

The MediaWiki "Report" extension has a Cross-Site Request Forgery CSRF vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit...

5.3CVSS7.6AI score0.00725EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/25 12:00 a.m.•4 views

PT-2021-6994

Name of the Vulnerable Software and Affected Versions MediaWiki Report extension affected versions not specified Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability. It allows a remote attacker to impact the integrity of protected information by forging requests to...

5.3CVSS6.1AI score0.00725EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/25 12:00 a.m.•8 views

CVE-2021-21275: Cross-Site Request Forgery (CSRF)

The MediaWiki "Report" extension has a Cross-Site Request Forgery CSRF vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit...

5.3CVSS5.7AI score0.00725EPSS
SaveExploits0References3
Rows per page
Query Builder