| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | ≥ 1.23.0, ≤ 1.23.16≥ 1.27.0, < 1.27.2≥ 1.28.0, < 1.28.1 | 1.27.21.28.1 |
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not require a CSRF token.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free