VULNERABILITY INTELLIGENCE

CVE-2020-29004

CVSS score8.8 HIGH

EPSS probability0.71%

CISA KEVNot currently listed

Published2021-01-29

Last modified2026-06-17

Description

The API in the Push extension for MediaWiki through 1.35 did not require an edit token in ApiPushBase.php and therefore facilitated a CSRF attack.