Candidate: CVE-2008-5252 PublicDate: 2008-12-19 17:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5252 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508868 Description: Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors. Ubuntu-Description: Notes: Bugs: Priority: untriaged Discovered-by: Assigned-to: CVSS: Patches_mediawiki: upstream_mediawiki: released (1:1.13.3-1) dapper_mediawiki: ignored (reached end-of-life) gutsy_mediawiki: needed (reached end-of-life) hardy_mediawiki: released (1:1.11.2-2ubuntu0.2) intrepid_mediawiki: released (1:1.12.0-2ubuntu0.2) jaunty_mediawiki: not-affected (1:1.13.3-1) karmic_mediawiki: not-affected (1:1.13.3-1) devel_mediawiki: not-affected (1:1.13.3-1)