MediaWiki before 1.15.3, and 1.6.x before 1.16.0beta2, does not properly handle a correctly authenticated but unintended login attempt, which makes it easier for remote authenticated users to conduct phishing attacks by arranging for a victim to login to the attackers account and then execute a crafted user script, related to a login CSRF issue.
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mediawiki | Mediawiki | * | 1.15.2 (including) |
Mediawiki | Mediawiki | 1.6.0 (including) | 1.6.0 (including) |
Mediawiki | Mediawiki | 1.6.1 (including) | 1.6.1 (including) |
Mediawiki | Mediawiki | 1.6.2 (including) | 1.6.2 (including) |
Mediawiki | Mediawiki | 1.6.3 (including) | 1.6.3 (including) |
Mediawiki | Mediawiki | 1.6.4 (including) | 1.6.4 (including) |
Mediawiki | Mediawiki | 1.6.5 (including) | 1.6.5 (including) |
Mediawiki | Mediawiki | 1.6.6 (including) | 1.6.6 (including) |
Mediawiki | Mediawiki | 1.6.7 (including) | 1.6.7 (including) |
Mediawiki | Mediawiki | 1.6.8 (including) | 1.6.8 (including) |
Mediawiki | Mediawiki | 1.6.9 (including) | 1.6.9 (including) |
Mediawiki | Mediawiki | 1.6.10 (including) | 1.6.10 (including) |
Mediawiki | Mediawiki | 1.6.11 (including) | 1.6.11 (including) |
Mediawiki | Mediawiki | 1.6.12 (including) | 1.6.12 (including) |
Mediawiki | Mediawiki | 1.7.0 (including) | 1.7.0 (including) |
Mediawiki | Mediawiki | 1.7.1 (including) | 1.7.1 (including) |
Mediawiki | Mediawiki | 1.7.2 (including) | 1.7.2 (including) |
Mediawiki | Mediawiki | 1.7.3 (including) | 1.7.3 (including) |
Mediawiki | Mediawiki | 1.8.0 (including) | 1.8.0 (including) |
Mediawiki | Mediawiki | 1.8.1 (including) | 1.8.1 (including) |
Mediawiki | Mediawiki | 1.8.2 (including) | 1.8.2 (including) |
Mediawiki | Mediawiki | 1.8.3 (including) | 1.8.3 (including) |
Mediawiki | Mediawiki | 1.8.4 (including) | 1.8.4 (including) |
Mediawiki | Mediawiki | 1.8.5 (including) | 1.8.5 (including) |
Mediawiki | Mediawiki | 1.9.0 (including) | 1.9.0 (including) |
Mediawiki | Mediawiki | 1.9.0-rc2 (including) | 1.9.0-rc2 (including) |
Mediawiki | Mediawiki | 1.9.1 (including) | 1.9.1 (including) |
Mediawiki | Mediawiki | 1.9.2 (including) | 1.9.2 (including) |
Mediawiki | Mediawiki | 1.9.3 (including) | 1.9.3 (including) |
Mediawiki | Mediawiki | 1.9.4 (including) | 1.9.4 (including) |
Mediawiki | Mediawiki | 1.9.5 (including) | 1.9.5 (including) |
Mediawiki | Mediawiki | 1.9.6 (including) | 1.9.6 (including) |
Mediawiki | Mediawiki | 1.10.0 (including) | 1.10.0 (including) |
Mediawiki | Mediawiki | 1.10.0-rc1 (including) | 1.10.0-rc1 (including) |
Mediawiki | Mediawiki | 1.10.0-rc2 (including) | 1.10.0-rc2 (including) |
Mediawiki | Mediawiki | 1.10.1 (including) | 1.10.1 (including) |
Mediawiki | Mediawiki | 1.10.2 (including) | 1.10.2 (including) |
Mediawiki | Mediawiki | 1.10.3 (including) | 1.10.3 (including) |
Mediawiki | Mediawiki | 1.10.4 (including) | 1.10.4 (including) |
Mediawiki | Mediawiki | 1.11.0 (including) | 1.11.0 (including) |
Mediawiki | Mediawiki | 1.11.0-rc1 (including) | 1.11.0-rc1 (including) |
Mediawiki | Mediawiki | 1.11.1 (including) | 1.11.1 (including) |
Mediawiki | Mediawiki | 1.11.2 (including) | 1.11.2 (including) |
Mediawiki | Mediawiki | 1.12.0 (including) | 1.12.0 (including) |
Mediawiki | Mediawiki | 1.12.0-rc1 (including) | 1.12.0-rc1 (including) |
Mediawiki | Mediawiki | 1.12.1 (including) | 1.12.1 (including) |
Mediawiki | Mediawiki | 1.12.2 (including) | 1.12.2 (including) |
Mediawiki | Mediawiki | 1.12.3 (including) | 1.12.3 (including) |
Mediawiki | Mediawiki | 1.12.4 (including) | 1.12.4 (including) |
Mediawiki | Mediawiki | 1.13.0 (including) | 1.13.0 (including) |
Mediawiki | Mediawiki | 1.13.0-rc1 (including) | 1.13.0-rc1 (including) |
Mediawiki | Mediawiki | 1.13.0-rc2 (including) | 1.13.0-rc2 (including) |
Mediawiki | Mediawiki | 1.13.1 (including) | 1.13.1 (including) |
Mediawiki | Mediawiki | 1.13.2 (including) | 1.13.2 (including) |
Mediawiki | Mediawiki | 1.13.3 (including) | 1.13.3 (including) |
Mediawiki | Mediawiki | 1.13.4 (including) | 1.13.4 (including) |
Mediawiki | Mediawiki | 1.14.0 (including) | 1.14.0 (including) |
Mediawiki | Mediawiki | 1.14.0-rc1 (including) | 1.14.0-rc1 (including) |
Mediawiki | Mediawiki | 1.14.1 (including) | 1.14.1 (including) |
Mediawiki | Mediawiki | 1.15.0 (including) | 1.15.0 (including) |
Mediawiki | Mediawiki | 1.15.0-rc1 (including) | 1.15.0-rc1 (including) |
Mediawiki | Mediawiki | 1.15.1 (including) | 1.15.1 (including) |
Mediawiki | Mediawiki | 1.16.0 (including) | 1.16.0 (including) |
Mediawiki | Mediawiki | 1.16.0-beta1 (including) | 1.16.0-beta1 (including) |
Mediawiki | Ubuntu | dapper | * |
Mediawiki | Ubuntu | devel | * |
Mediawiki | Ubuntu | hardy | * |
Mediawiki | Ubuntu | intrepid | * |
Mediawiki | Ubuntu | jaunty | * |
Mediawiki | Ubuntu | karmic | * |
Mediawiki | Ubuntu | upstream | * |