https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T10:13:26.674246+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-566 certfr-2015-avi-566 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Mediawiki</span>. Certaines d'entre elles perme… 2026-10-27T10:13:26.678258+00:00 certfr-2015-avi-566 https://cve.radiocsirt.org/vuln/cnvd-2016-00111 cnvd-2016-00111 2026-10-27T10:13:26.678292+00:00 cnvd-2016-00111 https://cve.radiocsirt.org/vuln/euvd-2026-95832 EUVD-2026-95832 2026-10-27T10:13:26.678308+00:00 EUVD-2026-95832 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8624 fkie_cve-2015-8624 2026-10-27T10:13:26.678320+00:00

The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8623.

 https://cve.radiocsirt.org/vuln/ghsa-3h2m-jjrw-87hw GHSA-3h2m-jjrw-87hw 2026-10-27T10:13:26.678347+00:00

The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8623.

 https://cve.radiocsirt.org/vuln/gsd-2015-8624 gsd-2015-8624 2026-10-27T10:13:26.678363+00:00 gsd-2015-8624 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8624 Withdrawn: UBUNTU-CVE-2015-8624 2026-10-27T10:13:26.678373+00:00

Withdrawn by the publisher.

Affected: Ubuntu:18.04:LTS: mediawiki

The User::matchEditToken function in includes/User.php in MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 does not perform token comparison in constant time before determining if a debugging message should be logged, which allows remote attackers to guess the edit token and bypass CSRF protection via a timing attack, a different vulnerability than CVE-2015-8623.