CVE-2024-47846

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 5, 2024
Updated: Oct 16, 2024
CWE ID 352

Summary

CVE-2024-47846 refers to a Cross-Site Request Forgery (CSRF) vulnerability discovered in The Wikimedia Foundation's Mediawiki - Cargo. This issue enables an attacker to perform unintended actions on a victim's Mediawiki site by tricking them into making unauthorized requests. Mediawiki - Cargo, a popular extension used for managing content, is affected from version 3.6.X before 3.6.1, making it essential for users to apply the available patch to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Mediawiki - Cargo

Affected Vendors

  • Mediawiki

Advisories, Assessments, and Mitigations