Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-45374
HistoryOct 09, 2023 - 12:00 a.m.

CVE-2023-45374

2023-10-0900:00:00
mitre
github.com
mediawiki
sportsteams
csrf

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams.

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-45374