CVE-2005-0535

Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users.

Published: Feb 22, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-0535
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
mediawiki / mediawiki	1.3.5	1.3.5.x
mediawiki / mediawiki	1.3.6	1.3.6.x
mediawiki / mediawiki	1.3	1.3.x
mediawiki / mediawiki	1.3.10	1.3.10.x
mediawiki / mediawiki	1.3.4	1.3.4.x
mediawiki / mediawiki	1.3.9	1.3.9.x
mediawiki / mediawiki	1.3.3	1.3.3.x
mediawiki / mediawiki	1.3.1	1.3.1.x
mediawiki / mediawiki	1.3.7	1.3.7.x
mediawiki / mediawiki	1.3.8	1.3.8.x
mediawiki / mediawiki	1.3.2	1.3.2.x
gentoo / linux	-	-

http://secunia.com/advisories/14360
http://securitytracker.com/id?1013260
http://sourceforge.net/project/shownotes.php?release_id=307067
http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml

Vulnerability Database

289,599

CVE-2005-0535