CVE-2022-29903

The Private Domains extension for MediaWiki through 1.37.2 (before 1ad65d4c1c199b375ea80988d99ab51ae068f766) allows CSRF for editing pages that store the…

published April 29, 2022

CVSS
—
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

The Private Domains extension for MediaWiki through 1.37.2 (before 1ad65d4c1c199b375ea80988d99ab51ae068f766) allows CSRF for editing pages that store the extension's configuration. The attacker must trigger a POST request to Special:PrivateDomains.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Published
2022-04-29T03:44Z
EPSS history
Timeline
  • 29 APR 03:44Z
    The Private Domains extension for MediaWiki through 1.37.2 (before 1ad65d4c1c199b375ea80988d99ab51ae068f766) allows CSRF for editing pages that store the…
    cvelistv5