CVE-2008-5252
Fixed in a distro release EPSS <1%
Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors.
Products: mediawiki
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mediawiki | 1:1.13.3-1 |
| Debian 13 | mediawiki | 1:1.13.3-1 |
| Debian 14 | mediawiki | 1:1.13.3-1 |
| Debian 4.0 | mediawiki1.7 | 1.7.1-9etch1 |
| Debian 5.0 | mediawiki | 1:1.12.0-2lenny2 |