CVE-2015-6728 Cross-site request forgery in n/a
Remote attackers can bypass CSRF protection in MediaWiki by guessing watchlist tokens via timing attacks, requiring user interaction.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2015-6728?
CVE-2015-6728 is a high-severity vulnerability in Mediawiki Mediawiki, published on 1 Sep 2015. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.
Weakness: CWE-352
Which versions are affected by CVE-2015-6728?
It affects 1 product.
Products include Mediawiki Mediawiki.
How do I fix CVE-2015-6728?
Upgrade to a fixed version.
Is CVE-2015-6728 being exploited?
There is no known exploitation of CVE-2015-6728 in the wild and no public exploit code.
Other vulnerabilities in Mediawiki Mediawiki
Sources
Also known as DEBIAN-CVE-2015-6728, GHSA-j8wf-wp2j-cmg7.