← All advisories

High severity8.8NVD Advisory· Published Jul 10, 2019· Updated Jun 17, 2026

CVE-2019-12466

CVE-2019-12466

Description

Wikimedia MediaWiki through 1.32.1 allows CSRF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mediawiki/corePackagist	>= 1.27.0, < 1.27.6	1.27.6
mediawiki/corePackagist	>= 1.30.0, < 1.30.2	1.30.2
mediawiki/corePackagist	>= 1.31.0, < 1.31.2	1.31.2
mediawiki/corePackagist	>= 1.32.0, < 1.32.2	1.32.2

Affected products

2

Wikimedia/MediaWikidescription
ghsa-coords
pkg:composer/mediawiki/core
Range: >= 1.27.0, < 1.27.6

Patches

Vulnerability mechanics

References

7

lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.htmlnvdPatchThird Party AdvisoryWEB
phabricator.wikimedia.org/T25227nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-27fw-r78j-h898ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-12466ghsaADVISORY
seclists.org/bugtraq/2019/Jun/12nvdMailing ListThird Party AdvisoryWEB
www.debian.org/security/2019/dsa-4460nvdThird Party AdvisoryWEB
github.com/FriendsOfPHP/security-advisories/blob/master/mediawiki/core/CVE-2019-12466.yamlghsaWEB

News mentions

0

No linked articles in our index yet.