https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 19:14:30 +0000 https://cve.radiocsirt.org/vuln/certfr-2015-avi-370 certfr-2015-avi-370 https://cve.radiocsirt.org/vuln/certfr-2015-avi-370 https://cve.radiocsirt.org/vuln/cnvd-2015-05879 cnvd-2015-05879 https://cve.radiocsirt.org/vuln/cnvd-2015-05879 https://cve.radiocsirt.org/vuln/euvd-2026-94513 EUVD-2026-94513 https://cve.radiocsirt.org/vuln/euvd-2026-94513 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6728 <p>The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.</p> <p>The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-6728 https://cve.radiocsirt.org/vuln/ghsa-j8wf-wp2j-cmg7 <p>The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.</p> <p>The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to guess the watchlist token and bypass CSRF protection via a timing attack.</p> https://cve.radiocsirt.org/vuln/ghsa-j8wf-wp2j-cmg7 https://cve.radiocsirt.org/vuln/gsd-2015-6728 gsd-2015-6728 https://cve.radiocsirt.org/vuln/gsd-2015-6728