Description

Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block module or (2) unblock a user via a request to the Unblock module.

Remediation

References

CVE-2012-1578

Related Vulnerabilities

WebLogic CVE-2021-2064 Vulnerability (CVE-2021-2064)

WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.4.7)

MySQL CVE-2017-3635 Vulnerability (CVE-2017-3635)

Squid Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-15811)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20357)

Severity

Medium

Classification

CVE-2012-1578 CWE-352

Tags

Missing Update Known Vulnerabilities