Launchpad.net

CVE 2010-1648

Cross-site request forgery (CSRF) vulnerability in the login interface in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to hijack the authentication of users for requests that (1) create accounts or (2) reset passwords, related to the Special:Userlogin form.

Related bugs and status

CVE-2010-1648 (Candidate) is related to these bugs:

Bug #586773: CSRF and XSS vulnerability; new version 1.15.4 released

		In	Importance	Status
586773	CSRF and XSS vulnerability; new version 1.15.4 released	mediawiki (Ubuntu)	Medium	Fix Released
586773	CSRF and XSS vulnerability; new version 1.15.4 released	mediawiki (Ubuntu Hardy)	Medium	Fix Released
586773	CSRF and XSS vulnerability; new version 1.15.4 released	mediawiki (Ubuntu Jaunty)	Medium	Fix Released
586773	CSRF and XSS vulnerability; new version 1.15.4 released	mediawiki (Ubuntu Lucid)	Medium	Fix Released
586773	CSRF and XSS vulnerability; new version 1.15.4 released	mediawiki (Ubuntu Maverick)	Medium	Fix Released
586773	CSRF and XSS vulnerability; new version 1.15.4 released	mediawiki (Ubuntu Karmic)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2010-1648

Related bugs and status

Related bugs

References