CVE-2014-2665

CVE-2014-2665 describes a "login CSRF" vulnerability in MediaWiki versions prior to 1.19.14, 1.21.8, and 1.22.5. This flaw allows a remote authenticated attacker to trick a victim into logging into the attacker's account, thereby enabling the attacker to track the victim's activity and potentially obtain sensitive information. The vulnerability has a CVSS score of 4.0, indicating a medium severity, with a network attack vector, low attack complexity, requiring authentication, and resulting in partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.