Description

The FanBoxes extension for MediaWiki through 1.37.2 (before 027ffb0b9d6fe0d823810cf03f5b562a212162d4) allows Special:UserBoxes CSRF.

Remediation

References

CVE-2022-29905

Related Vulnerabilities

PHP Resource Management Errors Vulnerability (CVE-2012-0789)

Drupal Core 4.7.x Multiple Cross-Site Scripting Vulnerabilities (4.7.0 - 4.7.6)

Apache Tomcat Improper Input Validation Vulnerability (CVE-2013-2185)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000509)

phpBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0471)

Severity

Medium

Classification

CVE-2022-29905 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities