Wikimedia MediaWiki allows CSRF

高危 8.8CVE-2019-12466 · GHSA-27fw-r78j-h898 · Published 10/07/2019 · updated 17/06/2026

要点

Package	Affected versions	Patched versions
mediawiki/core Packagist	`≥ 1.27.0, < 1.27.6≥ 1.30.0, < 1.30.2≥ 1.31.0, < 1.31.2≥ 1.32.0, < 1.32.2`	`1.27.61.30.21.31.21.32.2`
mediawiki mediawiki	`≤ 1.32.1`	No fix yet

Wikimedia MediaWiki through 1.32.1 allows CSRF in logout feature.

NVD description

Wikimedia MediaWiki through 1.32.1 allows CSRF.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 1.27.0, < 1.27.6≥ 1.30.0, < 1.30.2≥ 1.31.0, < 1.31.2≥ 1.32.0, < 1.32.2

1.27.61.30.21.31.21.32.2

≤ 1.32.1

No fix yet

mediawiki/core 的其他漏洞

查看全部 →