Description

Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading.

Remediation

References

CVE-2012-5394

Related Vulnerabilities

WordPress Plugin Woocommerce Products Price Bulk Edit Cross-Site Scripting (2.2.0)

WordPress Plugin MyBB Cross-Poster Cross-Site Scripting (1.0)

WordPress Plugin WP Server Health Stats Cross-Site Scripting (1.6.10)

WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.0.10)

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-5658)

Severity

Medium

Classification

CVE-2012-5394 CWE-352

Tags

Missing Update Known Vulnerabilities