mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others.
Note: This package is not maintained on
Packagist anymore, but newer releases exist.
Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF). It is possible to conduct CSRF during log out using
api.php?action=logout to steal a user's token.
mediawiki/core to version 1.27.6, 1.30.2, 1.31.2, 1.32.2, 1.33.0 or higher.