Fluid Attacks Database

Description

Wikimedia MediaWiki allows CSRF Wikimedia MediaWiki through 1.32.1 allows CSRF in logout feature.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
packagist	mediawiki/core	>=1.27.0 <1.27.6 \|\| >=1.30.0 <1.30.2 \|\| >=1.31.0 <1.31.2 \|\| >=1.32.0 <1.32.2	1.27.6, 1.30.2, 1.31.2, 1.32.2
debian 13	mediawiki	>=0 <1:1.31.2-1	1:1.31.2-1
debian 11	mediawiki	>=0 <1:1.31.2-1	1:1.31.2-1
debian 12	mediawiki	>=0 <1:1.31.2-1	1:1.31.2-1
debian 14	mediawiki	>=0 <1:1.31.2-1	1:1.31.2-1

Aliases

References