Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2013-4306 - Vulnerability Database
MediaWiki

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2013-4306

Medium
Reference: CVE-2013-4306
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-4306
Title: MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki possibly Checkuser before 2.3 allows remote attackers to hijack the authentication of arbitrary users for requests that quotperform sensitive write actionsquot via unspecified vectors.