CVE

Id
64253  
CVE No.
CVE-2013-4306  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that "perform sensitive write actions" via unspecified vectors.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
633835 64253 CVE-2013-4306 MLIST:[MediaWiki-announce] 20130903 MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633836 64253 CVE-2013-4306 URL:http://lists.wikimedia.org/pipermail/mediawiki-announce/2013-September/000133.html  View
633837 64253 CVE-2013-4306 MLIST:[oss-security] 20130904 Re: CVE request: MediaWiki Security Release: 1.21.2, 1.20.7 and 1.19.8  View
633838 64253 CVE-2013-4306 URL:http://seclists.org/oss-sec/2013/q3/553  View
633839 64253 CVE-2013-4306 CONFIRM:https://bugzilla.wikimedia.org/show_bug.cgi?id=45019  View
633840 64253 CVE-2013-4306 CONFIRM:https://git.wikimedia.org/commit/mediawiki%2Fextensions%2FCheckUser.git/99ad25d066ce6111e798427cba7f21526827f651  View
633841 64253 CVE-2013-4306 BID:62210  View
633842 64253 CVE-2013-4306 URL:http://www.securityfocus.com/bid/62210  View
633843 64253 CVE-2013-4306 OSVDB:96908  View
633844 64253 CVE-2013-4306 URL:http://osvdb.org/96908  View
633845 64253 CVE-2013-4306 XF:mediawiki-cve20134306-csrf(86893)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22913 JVNDB-2013-004488 libvirt におけるアクセス制限を回避される脆弱性 libvirt には、アクセス制限を回避される脆弱性が存在します。 CVE-2013-4311 64253 4.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004488.html  View