CVE-2008-5252

Common Vulnerabilities and Exposures

CVE-2008-5252 at MITRE

Details

Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors.

Novell Bugzilla entry: 443303,459058

SUSE Security Advisories:

SUSE-SR:2009:004, published Tue, 17 Feb 2009 10:00:00 +0000
SUSE-SR:2009:004 , published Tue, 17 Feb 2009 10:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 10.3	`mediawiki >= 1.10.0-32.2`	ZYPP Patch Nr: 5987 SAT Patch Nr: 506
openSUSE 11.0	`mediawiki-debuginfo >= 1.11.2-36.2`	ZYPP Patch Nr: 5987 SAT Patch Nr: 506
openSUSE 11.0	`mediawiki >= 1.11.2-36.2`	ZYPP Patch Nr: 5987 SAT Patch Nr: 506