EUVD-2022-34215

Malicious code in bioql PyPI...

BIT-MEDIAWIKI-2022-29905

The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...

CVE-2022-29905

The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...

CVE-2022-29905

The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...

CVE-2022-29905

The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...

Cross site request forgery (csrf)

The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...

CVE-2022-29905

The FanBoxes extension for MediaWiki through 1.37.2 before 027ffb0b9d6fe0d823810cf03f5b562a212162d4 allows Special:UserBoxes CSRF...

CVE-2022-29905

CVE-2022-29905 affects the FanBoxes extension for MediaWiki up to version 1.37.2. The vulnerability is a CSRF in Special:UserBoxes, arising from insufficient CSRF protection. Impact per CVSS 3.1 is LOW to MEDIUM with user interaction required. The fix is included in the patch 027ffb0b9d6fe0d82381...

PT-2022-19904 · Mediawiki +1 · Fanboxes Extension For Mediawiki +1

Name of the Vulnerable Software and Affected Versions: FanBoxes extension for MediaWiki versions through 1.37.2 Description: The issue allows for Special:UserBoxes CSRF. Recommendations: For FanBoxes extension for MediaWiki versions through 1.37.2, update to a version after...