Medium · 4.3 CVE-2024-40603 EUVD-2024-38539GHSA-rx8x-p7g9-g9c4

An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a …

Published Jul 6, 2024 · Updated Mar 17, 2025 · Assigned by mitre

Description

An issue was discovered in the ArticleRatings extension for MediaWiki through 1.42.1. Special:ChangeRating allows CSRF to alter data via a GET request.

Advisories 1

WID-SEC-2024-1540 MediaWiki: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2024

References

https://phabricator.wikimedia.org/T363884

EUVD	v3.1	4.3
CISA-ADP	v3.1	4.3