Cross-Site Request Forgery (CSRF) Vulnerability in Mediawiki - Cargo

CVE-2024-47846

What is CVE-2024-47846?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Wikimedia Foundation's Mediawiki - Cargo extension, enabling attackers to trick users into executing harmful requests without their consent. This vulnerability affects versions 3.6.X, prior to 3.6.1. If exploited, it could lead to unauthorized actions being performed on behalf of users, jeopardizing the integrity of user data and the overall application. Prompt application of security patches is crucial for affected users to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References