CVE-2024-40601: CSRF
Published Jul 6, 2024
·Updated
An issue was discovered in the MediaWikiChat extension for MediaWiki through 1.42.1. CSRF can occur in API modules.
Affected Software
1 affected component
MediaWiki MediaWiki<=1.42.1
Event History
Jul 6, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jul 7, 2024
Data Sourced
via NVD·12:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-40601?
CVE-2024-40601 is classified as a medium severity security vulnerability.
2
How do I fix CVE-2024-40601?
To fix CVE-2024-40601, upgrade the MediaWikiChat extension to a version above 1.42.1.
3
What types of attacks are possible due to CVE-2024-40601?
CVE-2024-40601 allows for cross-site request forgery (CSRF) attacks in API modules.
4
Which versions of MediaWiki are affected by CVE-2024-40601?
CVE-2024-40601 affects MediaWiki versions up to and including 1.42.1.
5
Who is impacted by CVE-2024-40601?
Users of the MediaWikiChat extension in MediaWiki installations up to version 1.42.1 are impacted by CVE-2024-40601.