CVE-2012-5394

Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows…

published December 13, 2013

CVSS
—
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00677 · 51.4th percentile
Published
2013-12-13T18:00Z
EPSS history
Timeline
  • 13 DEC 18:00Z
    Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows…
    cvelistv5