GHSA-7f7v-2qf4-gfq3: Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions
Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a freshly generated valid token. Attackers can lure an authenticated smw-admin user to a malicious page that triggers schema setup, entity-disposal, or job actions, causing semantic data loss and resource exhaustion.
Event History
Frequently Asked Questions
Who can be targeted by this issue?
An attacker must induce an authenticated user with smw-admin privileges to visit a malicious page. The issue affects Semantic MediaWiki versions from 3.0.0 up to, but not including, 7.3.1.
What actions can an attacker trigger through the forged request?
A forged request can trigger Special:SMWAdmin maintenance actions, including schema setup, entity disposal, and job actions. The resulting impact can include semantic data loss and resource exhaustion.
Does exploitation require the attacker to have an account or administrative access?
No attacker authentication or privileges are required. Exploitation does require user interaction: an authenticated smw-admin user must be lured to attacker-controlled content.
How can administrators determine whether they are affected?
Check the installed Semantic MediaWiki version. Deployments running 3.0.0 or later but earlier than 7.3.1 are affected.