CVE-2019-12466

Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.32.1

Description The issue is related to a component of the MediaWiki CMS for collaborative websites, which is vulnerable to cross-site request forgery (CSRF). This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability is specifically noted in the logout feature.

Recommendations For MediaWiki versions through 1.32.1, update to a version that includes a fix for this issue to prevent CSRF attacks. As a temporary workaround, consider restricting access to the logout feature until a patch is available.