Threats tagged 'ghsa-rq44-cfp6-2c3c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2024-34502WikibaseLexeme · Cross-Site Request Forgery Critical9.82024-05-05GCVE DatabaseCVE-2024-34502 A critical vulnerability (CVE-2024-34502) exists in the WikibaseLexeme extension of MediaWiki versions before 1.39.6, 1.40.x before 1.40.2, and 1.41.x before 1.41.1. The flaw allows the Special:MergeLexemes page to perform a merge edit without requiring a POST request or a valid edit token, enabling unauthorized edits. Report on CVE-2024-34502 Vulnerability CWE-352 #ghsa-rq44-cfp6-2c3c	GCVE Database	2024-05-05

Page 1 of 1