Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5252
HistoryDec 19, 2008 - 12:00 a.m.

CVE-2008-5252

2008-12-1900:00:00
ubuntu.com
ubuntu.com
7

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.002

Percentile

60.8%

Cross-site request forgery (CSRF) vulnerability in the Special:Import
feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x
before 1.13.3 allows remote attackers to perform unspecified actions as
authenticated users via unknown vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmediawiki< 1:1.11.2-2ubuntu0.2UNKNOWN
ubuntu8.10noarchmediawiki< 1:1.12.0-2ubuntu0.2UNKNOWN

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.002

Percentile

60.8%