An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams.
Metrics
Affected Vendors & Products
References
History
Thu, 19 Sep 2024 18:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-352 | |
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-10-09T00:00:00
Updated: 2024-09-19T17:45:18.791Z
Reserved: 2023-10-09T00:00:00
Link: CVE-2023-45374
Vulnrichment
Updated: 2024-08-02T20:21:16.640Z
NVD
Status : Modified
Published: 2023-10-09T06:15:10.723
Modified: 2024-11-21T08:26:50.750
Link: CVE-2023-45374
Redhat
No data.