Unrated severityNVD Advisory· Published Sep 9, 2012· Updated Jun 16, 2026
CVE-2012-1578
CVE-2012-1578
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijack the authentication of users with the block permission for requests that (1) block a user via a request to the Block module or (2) unblock a user via a request to the Unblock module.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:mediawiki:mediawiki:1.17:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:mediawiki:mediawiki:1.17:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.17.0:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.17.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.17.1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.17.2:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.17:beta_1:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.18:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.18.0:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.18.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.18.1:*:*:*:*:*:*:*
- cpe:2.3:a:mediawiki:mediawiki:1.18:beta_1:*:*:*:*:*:*
- (no CPE)range: >=1.17.0 <1.17.3 || >=1.18.0 <1.18.2
Patches
Vulnerability mechanics
References
9- lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.htmlnvdVendor Advisory
- secunia.com/advisories/48504nvdVendor Advisory
- lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.htmlnvd
- osvdb.org/80361nvd
- www.openwall.com/lists/oss-security/2012/03/22/9nvd
- www.openwall.com/lists/oss-security/2012/03/24/1nvd
- www.securityfocus.com/bid/52689nvd
- bugzilla.wikimedia.org/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/78911nvd
News mentions
0No linked articles in our index yet.