CVE-2008-5252: CSRF
Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x before 1.12.2, and 1.13.x before 1.13.3 allows remote attackers to perform unspecified actions as authenticated users via unknown vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5252?
The severity of CVE-2008-5252 is considered moderate as it allows remote attackers to perform actions as authenticated users.
How do I fix CVE-2008-5252?
To fix CVE-2008-5252, upgrade MediaWiki to version 1.12.2 or later.
Which versions of MediaWiki are affected by CVE-2008-5252?
CVE-2008-5252 affects MediaWiki versions from 1.3.0 to 1.6.10, as well as specific 1.12 and 1.13.x versions prior to 1.12.2 and 1.13.3 respectively.
What is a cross-site request forgery (CSRF) vulnerability in the context of CVE-2008-5252?
In the context of CVE-2008-5252, a CSRF vulnerability allows an attacker to trick an authenticated user into performing actions without their consent.
Can CVE-2008-5252 be exploited remotely?
Yes, CVE-2008-5252 can be exploited remotely by attackers to perform actions as authenticated users.