Field Assessment
AI analysis pending.
CVE
CVE-2012-5394
Severity
MEDIUM
CVSS
6.8
EPSS
0.68%
Original Filing — NVD Description
Cross-site request forgery (CSRF) vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading.