https://feed.craftedsignal.io/products/semantic-mediawiki-3.0.0-before-7.3.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 11:46:42 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-10-semantic-mediawiki-csrf/Tue, 27 Oct 2026 11:46:42 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-semantic-mediawiki-csrf/Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin, allowing an attacker to trigger unauthorized administrative actions.<p>Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery (CSRF) vulnerability in Special:SMWAdmin. The vulnerability occurs because the application overwrites the wpEditToken with a freshly generated valid token. An attacker can lure an authenticated smw-admin user to a malicious page that triggers schema setup, entity-disposal, or job actions, potentially resulting in semantic data loss and resource exhaustion.</p> mediumadvisory