In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-08-19T03:41:04

Updated: 2024-08-05T00:42:00.718Z

Reserved: 2019-08-18T00:00:00

Link: CVE-2019-15150

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-08-19T04:15:13.517

Modified: 2024-11-21T04:28:10.193

Link: CVE-2019-15150

cve-icon Redhat

No data.