Debian: 2753-1: mediawiki: information leak

Sep18
by Ike on September 18, 2013 at 1:50 am
Posted In: Other

(Sep 13) It was discovered that in Mediawiki, a wiki engine, several API modules allowed anti-CSRF tokens to be accessed via JSONP. These tokens protect against cross site request forgeries and are confidential. [More…]

└ Tags: , , ,
 Comment