Description
Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not require a CSRF token.
Remediation
References
Related Vulnerabilities
MySQL CVE-2022-21427 Vulnerability (CVE-2022-21427)
WordPress Plugin WatchTowerHQ Security Bypass (3.6.15)
OpenSSL Resource Management Errors Vulnerability (CVE-2011-3210)
SharePoint CVE-2022-41122 Vulnerability (CVE-2022-41122)
WordPress Plugin External Links-nofollow, noopener & new window Cross-Site Scripting (2.55)