---

CVE-2017-0362 - log back

CVE-2017-0362 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Remote
Type	+ Cross-site request forgery
Description	+ MediaWiki before 1.18.1 did not require a CSRF token for the "Mark all pages visited" action on the watchlist.
References	+ https://lists.wikimedia.org/pipermail/mediawiki-announce/2017-April/000207.html + https://phabricator.wikimedia.org/T150044
Notes