| Package | Affected versions | Patched versions |
|---|---|---|
| communications cloud native core network slice selection function | = 1.2.1 | |
| communications pricing design center | = 12.0.0.4.0= 12.0.0.5.0 | |
| report | < 2021-01-21 | 2021-01-21 |
The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit tokens.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free