medium4.3
CVE-2024-40603
An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1.
Impact
An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.42.1 |