Cross-Site request forgery (CSRF) vulnerability in The Wikimedia Foundation Mediawiki - RedirectManager Extension allows Cross Site Request Forgery. This issue affects Mediawiki - RedirectManager Extension: from * before 1.3.3.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 6.9 · mediawikiNVD modified 2026-10-25 17:10
Affected (CPE criteria) 1
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
References 3
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/RedirectManager/+/1275494 Issue Tracking
- https://phabricator.wikimedia.org/T423826 Third Party Advisory
- https://phabricator.wikimedia.org/T423826 Third Party Advisory