https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T19:14:39.512448+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-370 certfr-2015-avi-370 — De multiples vulnérabilités ont été corrigées dans <span class="textit">MediaWiki</span>. Elles permettent à un attaqua… 2026-10-14T19:14:39.516697+00:00 certfr-2015-avi-370 https://cve.radiocsirt.org/vuln/cnvd-2015-05879 cnvd-2015-05879 2026-10-14T19:14:39.516732+00:00 cnvd-2015-05879 https://cve.radiocsirt.org/vuln/euvd-2026-94513 EUVD-2026-94513 2026-10-14T19:14:39.516747+00:00 EUVD-2026-94513 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6728 fkie_cve-2015-6728 2026-10-14T19:14:39.516758+00:00

The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.

 https://cve.radiocsirt.org/vuln/ghsa-j8wf-wp2j-cmg7 GHSA-j8wf-wp2j-cmg7 2026-10-14T19:14:39.516784+00:00

The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.

 https://cve.radiocsirt.org/vuln/gsd-2015-6728 gsd-2015-6728 2026-10-14T19:14:39.516817+00:00 gsd-2015-6728