Cross-Site Request Forgery Vulnerability in CheckUser Extension for MediaWiki
CVE-2015-2940

Currently unrated

Key Information:

Vendor

Mediawiki
Status
Checkuser
Vendor
CVE Published:
13 April 2015

What is CVE-2015-2940?

The CheckUser extension for MediaWiki is prone to a Cross-Site Request Forgery (CSRF) vulnerability that enables remote attackers to hijack user authentication. By exploiting this security flaw, attackers can issue unauthorized requests on behalf of authenticated users, potentially gaining access to sensitive user information and compromising system integrity. This vulnerability underscores the importance of implementing robust security measures to protect user data and maintain the integrity of MediaWiki installations.

References

https://security.gentoo.org/glsa/201510-05
vendor-advisoryx_refsource_GENTOO
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/73477
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.