Lucene search

CVE-2020-25827

🗓️ 27 Sep 2020 21:12:15Reported by [email protected]Type

Issue in OATHAuth extension allows concurrent requests on multiple site

Reporter	Title	Published	Views	Family All 35
Cvelist	CVE-2020-25827	27 Sep 202020:43	–	cvelist
Tenable Nessus	Debian DLA-2379-3 : mediawiki regression update	28 Sep 202000:00	–	nessus
Tenable Nessus	Debian DSA-4767-1 : mediawiki - security update	28 Sep 202000:00	–	nessus
Tenable Nessus	Fedora 33 : mediawiki / php-oojs-oojs-ui / php-wikimedia-assert / etc (2020-a4802c53d9)	14 Dec 202000:00	–	nessus
Debian	[SECURITY] [DLA 2379-2] mediawiki regression update	28 Sep 202021:39	–	debian
Debian	[SECURITY] [DLA 2379-3] mediawiki regression update	21 Nov 202005:18	–	debian
Debian	[SECURITY] [DLA 2379-1] mediawiki security update	26 Sep 202001:26	–	debian
Debian	[SECURITY] [DSA 4767-1] mediawiki security update	25 Sep 202017:43	–	debian
Prion	Code injection	27 Sep 202021:15	–	prion
CVE	CVE-2020-25827	27 Sep 202021:15	–	cve

Nvd

Node

mediawiki mediawikiRange<1.31.10

mediawiki mediawikiRange1.32.0–1.34.4

Node

fedoraproject fedoraMatch33

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTTPZ7XMDS66I442OLLHXBDNP2LCBJU6/
lists	www.lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
lists	www.lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
phabricator	www.phabricator.wikimedia.org/T251661

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Sep 2020 21:15Current

CVSS25.0

CVSS37.5

EPSS0.002

CWE-307