CVEvulnerability
CVE-2015-2940
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve sensitive user information via unspecified vectors.
Affected configurations
• mediawiki checkuser
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:200 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2015/04/01/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/04/07/3 www.openwall.com
- http://www.securityfocus.com/bid/73477 www.securityfocus.com
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html Patch, Vendor Advisory
- https://phabricator.wikimedia.org/T85858 phabricator.wikimedia.org
- https://security.gentoo.org/glsa/201510-05 security.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:200 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2015/04/01/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/04/07/3 www.openwall.com
- http://www.securityfocus.com/bid/73477 www.securityfocus.com
- https://lists.wikimedia.org/pipermail/mediawiki-announce/2015-March/000175.html Patch, Vendor Advisory
- https://phabricator.wikimedia.org/T85858 phabricator.wikimedia.org
- https://security.gentoo.org/glsa/201510-05 security.gentoo.org