← All advisories

Unrated severityNVD Advisory· Published Apr 29, 2022· Updated Aug 3, 2024

CVE-2022-29905

CVE-2022-29905

Description

The FanBoxes extension for MediaWiki through 1.37.2 (before 027ffb0b9d6fe0d823810cf03f5b562a212162d4) allows Special:UserBoxes CSRF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

MediaWiki/FanBoxes extensiondescription
MediaWiki/FanBoxesllm-create
Range: <=1.37.2
osv-coords
pkg:bitnami/mediawiki
Range: < 1.37.3

Patches

Vulnerability mechanics

References

2

gerrit.wikimedia.org/r/c/mediawiki/extensions/FanBoxes/+/786327mitrex_refsource_MISC
phabricator.wikimedia.org/T306741mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.