CVE-2012-1578

Publication date 9 September 2012

Last updated 24 July 2024


Ubuntu priority

Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block module or (2) unblock a user via a request to the Unblock module.

Read the notes from the security team

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mediawiki 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
11.04 natty
Not affected
10.10 maverick Ignored end of life
10.04 LTS lucid
Not affected
8.04 LTS hardy Ignored end of life

Notes


micahg

Debian maintainer said 1.15 isn’t affected, see 1:1.15.5-9 changelog