Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2024-34502 - Vulnerability Database
MediaWiki

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2024-34502

Critical
Reference: CVE-2024-34502
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-34502
Title: MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

An issue was discovered in WikibaseLexeme in MediaWiki before 1.39.6 1.40.x before 1.40.2 and 1.41.x before 1.41.1. Loading Special:MergeLexemes will (attempt to) make an edit that merges the from-id to the to-id even if the request was not a POST request and even if it does not contain an edit token.