Lucene search
HistoryJun 08, 2010 - 12:30 a.m.
CVE-2010-1648
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.7%
Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form.
Affected configurations
Node
mediawikimediawikiMatch1.15.0
ORmediawikimediawikiMatch1.15.0rc1
ORmediawikimediawikiMatch1.15.1
ORmediawikimediawikiMatch1.15.2
ORmediawikimediawikiMatch1.15.3
ORmediawikimediawikiMatch1.16.0
ORmediawikimediawikiMatch1.16.0beta1
ORmediawikimediawikiMatch1.16.0beta2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mediawiki | mediawiki | 1.15.0 | cpe:2.3:a:mediawiki:mediawiki:1.15.0:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.0 | cpe:2.3:a:mediawiki:mediawiki:1.15.0:rc1:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.1 | cpe:2.3:a:mediawiki:mediawiki:1.15.1:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.2 | cpe:2.3:a:mediawiki:mediawiki:1.15.2:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.15.3 | cpe:2.3:a:mediawiki:mediawiki:1.15.3:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.16.0 | cpe:2.3:a:mediawiki:mediawiki:1.16.0:*:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.16.0 | cpe:2.3:a:mediawiki:mediawiki:1.16.0:beta1:*:*:*:*:*:* |
| mediawiki | mediawiki | 1.16.0 | cpe:2.3:a:mediawiki:mediawiki:1.16.0:beta2:*:*:*:*:*:* |
Related
debiancve
debiancve
CVE-2010-1648
2010-06-08 00:30:01
cve
cve
CVE-2010-1648
2010-06-08 00:30:01
prion
prion
Cross site request forgery (csrf)
2010-06-08 00:30:00
ubuntucve
ubuntucve
CVE-2010-1648
2010-06-08 00:00:00
cvelist
cvelist
CVE-2010-1648
2010-06-07 20:00:00
openvas
openvas
Fedora Update for mediawiki FEDORA-2010-10848
2010-07-12 00:00:00
FreeBSD Ports: mediawiki
2010-06-03 00:00:00
Fedora Update for mediawiki FEDORA-2010-10848
2010-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: mediawiki-1.15.4-54.fc12
2010-07-06 17:35:17
[SECURITY] Fedora 13 Update: mediawiki-1.15.4-54.fc13
2010-07-06 17:24:05
[SECURITY] Fedora 13 Update: mediawiki-1.16.5-59.fc13
2011-05-20 20:58:01
nessus
nessus
Fedora 12 : mediawiki-1.15.4-54.fc12 (2010-10848)
2010-07-07 00:00:00
Fedora 13 : mediawiki-1.15.4-54.fc13 (2010-10779)
2010-07-07 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.7%
Related for NVD:CVE-2010-1648