[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-12466":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":36,"aliases":37,"duplicate_of":9,"upstream":38,"downstream":39,"duplicates":48,"related":49,"reserved_at":9,"published_at":51,"modified_at":52,"state":53,"summary":54,"references_raw":63,"kevs":89,"epss":90,"epss_history":93,"metrics":358,"affected":369},"CVE-2019-12466","Wikimedia MediaWiki through 1.32.1 allows CSRF.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.","weakness","Stable","Compound","Medium",[20,24,28,32],{"id":21,"name":22,"techniques":23},"CAPEC-111","JSON Hijacking (aka JavaScript Hijacking)",[],{"id":25,"name":26,"techniques":27},"CAPEC-462","Cross-Domain Search Timing",[],{"id":29,"name":30,"techniques":31},"CAPEC-467","Cross Site Identification",[],{"id":33,"name":34,"techniques":35},"CAPEC-62","Cross Site Request Forgery",[],[],[],[],[40,42,44,46],{"_key":41},"UBUNTU-CVE-2019-12466",{"_key":43},"DSA-4460-1",{"_key":45},"MGASA-2019-0279",{"_key":47},"DEBIAN-CVE-2019-12466",[],[50],{"_key":45},"2019-07-10T15:31:50.000Z","2024-08-04T23:17:40.266Z","Modified",{"cisa_kev":55,"cisa_ransomware":55,"cisa_vendor":9,"epss_severity":56,"epss_score":57,"severity":58,"severity_score":59,"severity_version":60,"severity_source":61,"severity_vector":62,"severity_status":53},false,"low",0.00176,"high",8.8,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",[64,72,78,84],{"url":65,"sources":66,"tags":68},"https://www.debian.org/security/2019/dsa-4460",[67,61],"cve.org",[69,70,71],"Vendor Advisory","X Refsource DEBIAN","Third Party Advisory",{"url":73,"sources":74,"tags":75},"https://seclists.org/bugtraq/2019/Jun/12",[67,61],[76,77,71],"Mailing List","X Refsource BUGTRAQ",{"url":79,"sources":80,"tags":81},"https://lists.wikimedia.org/pipermail/wikitech-l/2019-June/092152.html",[67,61],[82,83,71],"X Refsource CONFIRM","Patch",{"url":85,"sources":86,"tags":87},"https://phabricator.wikimedia.org/T25227",[67,61],[88,83,71],"X Refsource MISC",[],{"date":91,"score":57,"percentile":92},"2026-06-04",0.38853,[94,98,101,104,107,110,113,116,119,121,124,127,130,133,136,139,142,145,148,150,153,156,159,162,165,168,171,174,177,180,183,185,188,191,194,196,199,202,205,208,211,214,216,219,222,225,228,231,234,237,240,243,246,249,253,255,258,261,264,267,270,273,276,279,282,285,287,290,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355],{"date":95,"score":96,"percentile":97},"2025-11-04",0.0018,0.39899,{"date":99,"score":96,"percentile":100},"2025-11-05",0.39892,{"date":102,"score":96,"percentile":103},"2025-11-06",0.39896,{"date":105,"score":96,"percentile":106},"2025-11-07",0.3992,{"date":108,"score":96,"percentile":109},"2025-11-08",0.39911,{"date":111,"score":96,"percentile":112},"2025-11-09",0.39895,{"date":114,"score":96,"percentile":115},"2025-11-10",0.39859,{"date":117,"score":96,"percentile":118},"2025-11-11",0.39878,{"date":120,"score":96,"percentile":109},"2025-11-12",{"date":122,"score":96,"percentile":123},"2025-11-13",0.39925,{"date":125,"score":96,"percentile":126},"2025-11-14",0.39926,{"date":128,"score":96,"percentile":129},"2025-11-15",0.39922,{"date":131,"score":96,"percentile":132},"2025-11-16",0.39903,{"date":134,"score":96,"percentile":135},"2025-11-17",0.39877,{"date":137,"score":96,"percentile":138},"2025-11-18",0.34813,{"date":140,"score":96,"percentile":141},"2025-11-19",0.34823,{"date":143,"score":96,"percentile":144},"2025-11-20",0.34802,{"date":146,"score":96,"percentile":147},"2025-11-21",0.39882,{"date":149,"score":96,"percentile":147},"2025-11-22",{"date":151,"score":96,"percentile":152},"2025-11-23",0.39852,{"date":154,"score":96,"percentile":155},"2025-11-24",0.39842,{"date":157,"score":96,"percentile":158},"2025-11-25",0.39855,{"date":160,"score":96,"percentile":161},"2025-11-26",0.39848,{"date":163,"score":96,"percentile":164},"2025-11-27",0.39857,{"date":166,"score":96,"percentile":167},"2025-11-28",0.39831,{"date":169,"score":96,"percentile":170},"2025-11-29",0.39806,{"date":172,"score":96,"percentile":173},"2025-11-30",0.39784,{"date":175,"score":96,"percentile":176},"2025-12-01",0.39907,{"date":178,"score":96,"percentile":179},"2025-12-02",0.39914,{"date":181,"score":96,"percentile":182},"2025-12-03",0.39916,{"date":184,"score":96,"percentile":173},"2025-12-04",{"date":186,"score":96,"percentile":187},"2025-12-05",0.39816,{"date":189,"score":96,"percentile":190},"2025-12-06",0.39813,{"date":192,"score":96,"percentile":193},"2025-12-07",0.39792,{"date":195,"score":96,"percentile":170},"2025-12-08",{"date":197,"score":96,"percentile":198},"2025-12-09",0.39843,{"date":200,"score":96,"percentile":201},"2025-12-10",0.39901,{"date":203,"score":96,"percentile":204},"2025-12-11",0.3993,{"date":206,"score":96,"percentile":207},"2025-12-12",0.39964,{"date":209,"score":96,"percentile":210},"2025-12-13",0.3994,{"date":212,"score":96,"percentile":213},"2025-12-14",0.39902,{"date":215,"score":96,"percentile":147},"2025-12-15",{"date":217,"score":96,"percentile":218},"2025-12-16",0.39913,{"date":220,"score":96,"percentile":221},"2025-12-17",0.39956,{"date":223,"score":96,"percentile":224},"2025-12-18",0.4,{"date":226,"score":96,"percentile":227},"2025-12-19",0.40015,{"date":229,"score":96,"percentile":230},"2025-12-20",0.39995,{"date":232,"score":96,"percentile":233},"2025-12-21",0.39954,{"date":235,"score":96,"percentile":236},"2025-12-22",0.39927,{"date":238,"score":96,"percentile":239},"2025-12-23",0.39933,{"date":241,"score":96,"percentile":242},"2025-12-24",0.3995,{"date":244,"score":96,"percentile":245},"2025-12-25",0.40004,{"date":247,"score":96,"percentile":248},"2025-12-26",0.39982,{"date":250,"score":251,"percentile":252},"2025-12-27",0.00164,0.38009,{"date":254,"score":96,"percentile":213},"2025-12-28",{"date":256,"score":96,"percentile":257},"2025-12-29",0.39876,{"date":259,"score":96,"percentile":260},"2025-12-30",0.39867,{"date":262,"score":96,"percentile":263},"2025-12-31",0.39918,{"date":265,"score":96,"percentile":266},"2026-01-01",0.40067,{"date":268,"score":96,"percentile":269},"2026-01-02",0.40044,{"date":271,"score":96,"percentile":272},"2026-01-03",0.40036,{"date":274,"score":96,"percentile":275},"2026-01-04",0.39875,{"date":277,"score":96,"percentile":278},"2026-01-05",0.39844,{"date":280,"score":96,"percentile":281},"2026-01-06",0.39847,{"date":283,"score":96,"percentile":284},"2026-01-07",0.3987,{"date":286,"score":96,"percentile":100},"2026-01-08",{"date":288,"score":96,"percentile":289},"2026-01-09",0.39879,{"date":291,"score":96,"percentile":289},"2026-01-10",{"date":293,"score":96,"percentile":294},"2026-01-11",0.39856,{"date":296,"score":96,"percentile":297},"2026-01-12",0.39808,{"date":299,"score":96,"percentile":300},"2026-01-13",0.39791,{"date":302,"score":96,"percentile":303},"2026-01-14",0.3984,{"date":305,"score":96,"percentile":306},"2026-01-15",0.39828,{"date":308,"score":96,"percentile":309},"2026-01-16",0.3985,{"date":311,"score":96,"percentile":312},"2026-01-17",0.39824,{"date":314,"score":96,"percentile":315},"2026-01-18",0.39779,{"date":317,"score":96,"percentile":318},"2026-01-19",0.39747,{"date":320,"score":96,"percentile":321},"2026-01-20",0.39732,{"date":323,"score":96,"percentile":324},"2026-01-21",0.39728,{"date":326,"score":96,"percentile":327},"2026-01-22",0.39719,{"date":329,"score":96,"percentile":330},"2026-01-23",0.39782,{"date":332,"score":96,"percentile":333},"2026-01-24",0.39786,{"date":335,"score":96,"percentile":336},"2026-01-25",0.39738,{"date":338,"score":96,"percentile":339},"2026-01-26",0.39682,{"date":341,"score":96,"percentile":342},"2026-01-27",0.3968,{"date":344,"score":96,"percentile":345},"2026-01-28",0.39675,{"date":347,"score":96,"percentile":348},"2026-01-29",0.39652,{"date":350,"score":96,"percentile":351},"2026-01-30",0.39657,{"date":353,"score":96,"percentile":354},"2026-01-31",0.39665,{"date":356,"score":96,"percentile":357},"2026-02-01",0.39769,[359],{"source":61,"cvss_v2_0":360,"cvss_v3_0":365,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":361,"baseSeverity":9,"vectorString":362,"impactScore":363,"exploitabilityScore":364},6.8,"AV:N/AC:M/Au:N/C:P/I:P/A:P",6.4,8.6,{"baseScore":59,"baseSeverity":366,"vectorString":62,"impactScore":367,"exploitabilityScore":368},"HIGH",9.8,7.2,[370,379],{"ecosystem":9,"name":371,"vendor":372,"product":373,"cpe_part":374,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":375},"debian linux","debian","debian_linux","o",[376],{"version":377,"is_range":55,"range_type":378,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0","cpe",{"ecosystem":9,"name":380,"vendor":380,"product":380,"cpe_part":381,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":382},"mediawiki","a",[383],{"version":384,"is_range":385,"range_type":378,"version_start":9,"version_start_type":9,"version_end":386,"version_end_type":387,"fixed_in":9},"lte1.32.1",true,"1.32.1","including"]