Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-1648
6.8
MEDIUMCVSS v2
Published
June 8, 2010
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form.
wikimedia/mediawiki
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.
GitHub🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.= 1.16.0, = 1.15.1, = 1.15.0, = 1.15.3, = 1.15.2NVD