Description
YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to restore old page revisions through GET requests lacking CSRF token validation. Attackers can lure write-capable users into a top-level navigation with the restoreRevisionId parameter, silently overwriting current page content with stale or vandalized revisions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YesWiki | yeswiki | < 4.6.7 | 4.6.7 |
References
- GitHub Security Advisory (GHSA-vj5g-974q-7ff3) vendor-advisory
- VulnCheck Advisory: YesWiki before 4.6.7 CSRF Page Revision Restore via RevisionsHandler third-party-advisory