Description
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not require a CSRF token.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Data Access SQL Injection (4.3.1)
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2006-4471)
WordPress Plugin Access Demo Importer Arbitrary File Upload (1.0.6)
MySQL CVE-2024-20981 Vulnerability (CVE-2024-20981)
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10356)