Unscored severity · published Feb 22, 2005
CVE-2005-0535
Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Gentoo
All versions, or not specified · source: NVD
ME
Mediawiki · Mediawiki
1.3; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0535
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0535
Patch
http://secunia.com/advisories/14360
Patch
http://securitytracker.com/id?1013260
Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=307067
Patch
http://www.gentoo.org/security/en/glsa/glsa-200502-33.xml
More from Linux
9.8
CVE-2024-12084
Rsync: heap buffer overflow in rsync due to improper checksum length handling
7.5
CVE-2024-12087
Rsync: path traversal vulnerability in rsync
7.5
CVE-2024-12088
Rsync: --safe-links option bypass leads to path traversal
7.5
CVE-2024-12085
Rsync: info leak via uninitialized stack contents
6.8
CVE-2024-12086
A flaw was found in rsync