Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-35579 State: PUBLISHED Published: 2020-12-20T06:31:46 Last Updated: 2024-08-04T17:09:13.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: tindy2013 subconverter 0.6.4 has a /sub?target=%TARGET%&url=%URL%&config=%CONFIG% API endpoint that accepts an arbitrary %URL% value and launches a GET request for it, but does not consider that the external request target may indirectly redirect back to this original /sub endpoint. Thus, a request loop and a denial of service may occur. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tindy2013/subconverter/issues/284
CVE ID: CVE-2020-35580 State: PUBLISHED Published: 2021-05-20T15:25:59 Last Updated: 2024-08-04T17:09:14.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the operating system via a /searchblox/servlet/FileServlet?col=url= request. Additionally, this may be used to read the contents of the SearchBlox configuration file (e.g., searchblox/WEB-INF/config.xml), which contains both the Super Admin's API key and the base64 encoded SHA1 password hashes of other SearchBlox users. Additional Analyst Notes: - CVE Program Container: Refer
base64 encoded SHA1 password hashes of other SearchBlox users. Additional Analyst Notes: - CVE Program Container: References: - https://developer.searchblox.com/docs/getting-started-with-searchblox - https://hateshape.github.io/general/2021/05/11/CVE-2020-35580.html
CVE ID: CVE-2020-35581 State: PUBLISHED Published: 2021-01-15T06:23:42 Last Updated: 2024-08-04T17:09:13.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the meta[title] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enviragallery/envira-gallery-lite/commit/3b081dd10a1731f8cd981bebeac0e775fb217acf - https://github.com/enviragallery/envira-gallery-lite/commit/102651514e6faca914ec1c7e113def340d8e1e09 - http://packetstormsecurity.com/files/16
iragallery/envira-gallery-lite/commit/102651514e6faca914ec1c7e113def340d8e1e09 - http://packetstormsecurity.com/files/160924/Envira-Gallery-Lite-1.8.3.2-Cross-Site-Scripting.html - https://github.com/enviragallery/envira-gallery-lite/blob/master/changelog.txt
CVE ID: CVE-2020-35582 State: PUBLISHED Published: 2021-01-15T06:24:49 Last Updated: 2024-08-04T17:09:14.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the post_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/enviragallery/envira-gallery-lite/commit/3b081dd10a1731f8cd981bebeac0e775fb217acf - https://github.com/enviragallery/envira-gallery-lite/commit/102651514e6faca914ec1c7e113def340d8e1e09 - http://packetstormsecurity.com/files/160924/En
ery/envira-gallery-lite/commit/102651514e6faca914ec1c7e113def340d8e1e09 - http://packetstormsecurity.com/files/160924/Envira-Gallery-Lite-1.8.3.2-Cross-Site-Scripting.html - https://github.com/enviragallery/envira-gallery-lite/blob/master/changelog.txt
CVE ID: CVE-2020-35584 State: PUBLISHED Published: 2020-12-23T14:53:19 Last Updated: 2024-08-04T17:09:14.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature. An attacker suitably positioned to view a legitimate user's network traffic could record and monitor their interactions with the web services and obtain any information the user supplies, including Administrator passwords and screen keys. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.mersive.com/content/pages/release-notes.htm - https://www.mersive.co
gram Container: References: - https://documentation.mersive.com/content/pages/release-notes.htm - https://www.mersive.com/uk/products/solstice/ - https://github.com/aress31/solstice-pod-cves
CVE ID: CVE-2020-35585 State: PUBLISHED Published: 2020-12-23T14:56:11 Last Updated: 2024-08-04T17:09:14.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because there are only 1.7 million possibilities. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.mersive.com/content/pages/release-notes.htm - https://www.mersive.com/uk/products/solstice/ - https://github.com/aress31/solstice-pod-cves
CVE ID: CVE-2020-35586 State: PUBLISHED Published: 2020-12-23T14:58:20 Last Updated: 2024-08-04T17:09:13.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Solstice Pod before 3.3.0 (or Open4.3), the Administrator password can be enumerated using brute-force attacks via the /Config/service/initModel?password= Solstice Open Control API because there is no complexity requirement (e.g., it might be all digits or all lowercase letters). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.mersive.com/content/pages/release-notes.htm - https://www.mersive.com/uk/products/solstice/ - https://github.com/aress31/solstice-pod-cves
CVE ID: CVE-2020-35587 State: PUBLISHED Published: 2020-12-23T15:19:28 Last Updated: 2024-08-04T17:09:14.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Solstice Pod before 3.0.3, the firmware can easily be decompiled/disassembled. The decompiled/disassembled files contain non-obfuscated code. NOTE: it is unclear whether lack of obfuscation is directly associated with a negative impact, or instead only facilitates an attack technique Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.mersive.com/content/pages/release-notes.htm - https://www.mersive.com/uk/products/solstice/ - https://github.com/aress31/solstice-p
/content/pages/release-notes.htm - https://www.mersive.com/uk/products/solstice/ - https://github.com/aress31/solstice-pod-cves - https://attack.mitre.org/techniques/T1444/
CVE ID: CVE-2020-35588 State: REJECTED Published: N/A Last Updated: 2022-12-07T00:00:00 Description: No description available.
CVE ID: CVE-2020-35589 State: PUBLISHED Published: 2020-12-21T06:03:41 Last Updated: 2024-08-04T17:09:13.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-login-attempts&tab= XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. Additional Analyst Notes: - CVE Program Container: Referen
URL that is posted publicly or e-mailed directly to victims. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/wordpress-plugin-limit-login-attempts-reloaded/ - https://wordpress.org/plugins/limit-login-attempts-reloaded/#developers
CVE ID: CVE-2020-35590 State: PUBLISHED Published: 2020-12-21T06:03:52 Last Updated: 2024-08-04T17:09:14.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: LimitLoginAttempts.php in the limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows a bypass of (per IP address) rate limits because the X-Forwarded-For header can be forged. When the plugin is configured to accept an arbitrary header for the client source IP address, a malicious user is not limited to perform a brute force attack, because the client IP header accepts any arbitrary string. When randomizing the header input, the login count does not ever reach the maximum allowed retries. Additional Analyst N
When randomizing the header input, the login count does not ever reach the maximum allowed retries. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/wordpress-plugin-limit-login-attempts-reloaded/ - https://wordpress.org/plugins/limit-login-attempts-reloaded/#developers
CVE ID: CVE-2020-35591 State: PUBLISHED Published: 2021-02-18T19:26:56 Last Updated: 2024-08-04T17:09:14.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The application does not generate a new session cookie after the user is logged in. A malicious user is able to create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the attacker access to the user's account through the active session. Additional Analyst Notes: - CVE Program Container: References: - https://discourse.pi-hole.net/c/announcements/5 - https://n4nj0.github.io/advisories/pi-hole-multiple-
er: References: - https://discourse.pi-hole.net/c/announcements/5 - https://n4nj0.github.io/advisories/pi-hole-multiple-vulnerabilities-i/
CVE ID: CVE-2020-35592 State: PUBLISHED Published: 2021-02-18T19:29:40 Last Updated: 2024-08-04T17:09:14.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against other users and steal the session cookie. Additional Analyst Notes: - CVE Program Container: References: - https://discourse.pi-hole.net/c/announcements/5 - https://n4nj0.github.io/advisories/pi-hole-multiple-vulnerabilities-i/
CVE ID: CVE-2020-35593 State: PUBLISHED Published: 2023-09-05T00:00:00 Last Updated: 2024-09-30T20:07:28.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securifera.com/advisories/ - https://webapps.bmc.com/support/faces/az/prodallversions.jsp?seqid=304517 - https://community.bmc.com/s/article/SECURITY-Patrol-Agent-Local-Privilege-Escalation-in-BMC-PATROL-Agent-CVE-2020-35593 - https://www.securifera.com/blog/2021/03/08/bmc-patrol-agent-domain-user-to-domain-admin-
C-PATROL-Agent-CVE-2020-35593 - https://www.securifera.com/blog/2021/03/08/bmc-patrol-agent-domain-user-to-domain-admin-part-2/ - http://web.archive.org/web/20210106175128/https://community.bmc.com/s/article/SECURITY-Patrol-Agent-Local-Privilege-Escalation-in-BMC-PATROL-Agent-CVE-2020-35593
CVE ID: CVE-2020-35594 State: PUBLISHED Published: 2021-03-05T16:29:12 Last Updated: 2024-08-04T17:09:14.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus before 7066 allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/ad-manager/release-notes.html#7066
CVE ID: CVE-2020-35597 State: PUBLISHED Published: 2022-06-16T18:26:22 Last Updated: 2024-08-04T17:09:14.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id parameter of admin_edit_user.php, and edit parameter of admin_update_categories.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VictorAlagwu/CMSsite/issues/16 - https://cxsecurity.com/issue/WLB-2020120118 - https://www.exploit-db.com/exploits/49282
CVE ID: CVE-2020-35598 State: PUBLISHED Published: 2020-12-23T18:52:07 Last Updated: 2024-08-04T17:09:14.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: ACS Advanced Comment System 1.0 is affected by Directory Traversal via an advanced_component_system/index.php?ACS_path=..%2f URI. NOTE: this might be the same as CVE-2009-4623 Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2020/Dec/13
CVE ID: CVE-2020-35604 State: PUBLISHED Published: 2020-12-21T18:57:13 Last Updated: 2024-08-04T17:09:14.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE attack can occur in Kronos WebTA 5.0.4 when SAML is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.mindpointgroup.com/blog/webta-xxe-version-5-0-4-vulnerability/
CVE ID: CVE-2020-35605 State: PUBLISHED Published: 2020-12-21T19:07:36 Last Updated: 2024-08-04T17:09:14.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to execute arbitrary code because a filename containing special characters can be included in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kovidgoyal/kitty/issues/3128 - https://github.com/kovidgoyal/kitty/commit/82c137878c2b99100a3cdc1c0f0efea069313901 - https://www.debian.org/security/2020/dsa-4819
CVE ID: CVE-2020-35606 State: PUBLISHED Published: 2020-12-21T19:19:17 Last Updated: 2024-08-04T17:09:14.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentest.com.tr/exploits/Webmin-1962-PU-Escape-Bypass-Remote-Command-Execution.html - https://www.webmin.com/download.html - http://packetstormsecurity.com/files/160676/Webmin-1.962
Command-Execution.html - https://www.webmin.com/download.html - http://packetstormsecurity.com/files/160676/Webmin-1.962-Remote-Command-Execution.html - https://www.exploit-db.com/exploits/49318
CVE ID: CVE-2020-35608 State: PUBLISHED Published: 2020-12-22T19:23:15 Last Updated: 2024-08-04T17:09:14.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A specially crafted AF_PACKET socket can cause a process to create an executable memory mapping with controllable content. An attacker can execute a shellcode that uses the PACKET_MMAP functionality to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1134 - https://talosintelligence.com/vul
eferences: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1134 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1134
CVE ID: CVE-2020-35609 State: PUBLISHED Published: 2020-12-22T19:24:55 Last Updated: 2024-08-04T17:09:14.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial-of-service vulnerability exists in the asynchronous ioctl functionality of Microsoft Azure Sphere 20.05. A sequence of specially crafted ioctl calls can cause a denial of service. An attacker can write shellcode to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1117 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1117
CVE ID: CVE-2020-35610 State: PUBLISHED Published: 2020-12-28T19:39:18.000331Z Last Updated: 2024-09-17T01:51:48.440Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: Information Disclosure Description: An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of com_finder did not respect the access level of the corresponding terms. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/828-20201101-core-com-finder-ignores-access-levels-on-autosuggest.html
CVE ID: CVE-2020-35611 State: PUBLISHED Published: 2020-12-28T19:39:18.132811Z Last Updated: 2024-09-16T20:02:48.985Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: Information Disclosure Description: An issue was discovered in Joomla! 2.5.0 through 3.9.22. The globlal configuration page does not remove secrets from the HTML output, disclosing the current values. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/829-20201102-core-disclosure-of-secrets-in-global-configuration-page.html
CVE ID: CVE-2020-35612 State: PUBLISHED Published: 2020-12-28T19:39:18.241087Z Last Updated: 2024-09-16T23:10:23.521Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: Path traversal Description: An issue was discovered in Joomla! 2.5.0 through 3.9.22. The folder parameter of mod_random_image lacked input validation, leading to a path traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/830-20201103-core-path-traversal-in-mod-random-image.html
CVE ID: CVE-2020-35613 State: PUBLISHED Published: 2020-12-28T19:39:18.351403Z Last Updated: 2024-09-16T20:38:00.537Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: SQL Injection Description: An issue was discovered in Joomla! 3.0.0 through 3.9.22. Improper filter blacklist configuration leads to a SQL injection vulnerability in the backend user list. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/831-20201104-core-sql-injection-in-com-users-list-view.html
CVE ID: CVE-2020-35614 State: PUBLISHED Published: 2020-12-28T19:39:18.455789Z Last Updated: 2024-09-16T22:35:21.093Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: User Enumeration Description: An issue was discovered in Joomla! 3.9.0 through 3.9.22. Improper handling of the username leads to a user enumeration attack vector in the backend login page. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/832-20201105-core-user-enumeration-in-backend-login.html
CVE ID: CVE-2020-35615 State: PUBLISHED Published: 2020-12-28T19:39:18.556142Z Last Updated: 2024-09-16T23:21:35.122Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: CSRF Description: An issue was discovered in Joomla! 2.5.0 through 3.9.22. A missing token check in the emailexport feature of com_privacy causes a CSRF vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/833-20201106-core-csrf-in-com-privacy-emailexport-feature.html
CVE ID: CVE-2020-35616 State: PUBLISHED Published: 2020-12-28T19:39:18.657708Z Last Updated: 2024-09-16T18:55:49.368Z Vendors: Joomla! Project Products: Joomla! CMS Problem Types: ACL Violation Description: An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/834-20201107-core-write-acl-violation-in-multiple-core-views.html
CVE ID: CVE-2020-35617 State: REJECTED Published: 2021-02-15T21:49:37 Last Updated: 2021-02-15T21:49:37 Description: No description available.
CVE ID: CVE-2020-35618 State: REJECTED Published: 2021-02-15T21:49:45 Last Updated: 2021-02-15T21:49:45 Description: No description available.
CVE ID: CVE-2020-35619 State: REJECTED Published: 2021-02-15T21:49:52 Last Updated: 2021-02-15T21:49:52 Description: No description available.
CVE ID: CVE-2020-35620 State: REJECTED Published: 2021-02-15T21:49:59 Last Updated: 2021-02-15T21:49:59 Description: No description available.
CVE ID: CVE-2020-35621 State: REJECTED Published: 2021-02-15T21:50:08 Last Updated: 2021-02-15T21:50:08 Description: No description available.
CVE ID: CVE-2020-35622 State: PUBLISHED Published: 2020-12-21T22:37:29 Last Updated: 2024-08-04T17:09:14.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the GlobalUsage extension for MediaWiki through 1.35.1. SpecialGlobalUsage.php calls WikiMap::makeForeignLink unsafely. The $page variable within the formatItem function was not being properly escaped, allowing for XSS under certain conditions. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T268341 - https://gerrit.wikimedia.org/r/c/mediawiki/extensions/GlobalUsage/+/646744
CVE ID: CVE-2020-35623 State: PUBLISHED Published: 2020-12-21T22:37:15 Last Updated: 2024-08-04T17:09:14.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the CasAuth extension for MediaWiki through 1.35.1. Due to improper username validation, it allowed user impersonation with trivial manipulations of certain characters within a given username. An ordinary user may be able to login as a "bureaucrat user" who has a similar username, as demonstrated by usernames that differ only in (1) bidirectional override symbols or (2) blank space. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T263498 - https://g
. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T263498 - https://github.com/CWRUChielLab/CASAuth/pull/11
CVE ID: CVE-2020-35624 State: PUBLISHED Published: 2020-12-21T22:36:51 Last Updated: 2024-08-04T17:09:14.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the SecurePoll extension for MediaWiki through 1.35.1. The non-admin vote list contains a full vote timestamp, which may provide unintended clues about how a voting process unfolded. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T268794 - https://gerrit.wikimedia.org/r/q/If8e15eb8ce9ec652c06816cbff52bb084fd50e73
CVE ID: CVE-2020-35625 State: PUBLISHED Published: 2020-12-21T22:36:26 Last Updated: 2024-08-04T17:09:14.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Widgets extension for MediaWiki through 1.35.1. Any user with the ability to edit pages within the Widgets namespace could call any static function within any class (defined within PHP or MediaWiki) via a crafted HTML comment, related to a Smarty template. For example, a person in the Widget Editors group could use \MediaWiki\Shell\Shell::command within a comment. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T269718 - https://gerrit.wikimedia
alyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T269718 - https://gerrit.wikimedia.org/r/q/Ic899a8b15bc510e61cdacb5c024af2d226a2dbeb
CVE ID: CVE-2020-35626 State: PUBLISHED Published: 2020-12-21T22:34:06 Last Updated: 2024-08-04T17:09:15.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the PushToWatch extension for MediaWiki through 1.35.1. The primary form did not implement an anti-CSRF token and therefore was completely vulnerable to CSRF attacks against onSkinAddFooterLinks in PushToWatch.php. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T268641 - https://gerrit.wikimedia.org/r/q/14dc79b1f44c2a1ca6b1192284206c7b8626fb57