Authorization

The MWOAuthDataStore::lookuptoken function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the authorization signature, which allows remote registered Consumers to use another Consumer's...

CVE-2015-8009

The MWOAuthDataStore::lookuptoken function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the authorization signature, which allows remote registered Consumers to use another Consumer's...

CVE-2015-8009: Undefined Security Weakness

The MWOAuthDataStore::lookuptoken function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4, and before 1.23.11 does not properly validate the signature when checking the authorization signature, which allows remote registered Consumers to use another Consumer's...

PT-2017-7310

Name of the Vulnerable Software and Affected Versions MediaWiki Extension:OAuth versions 1.25.x before 1.25.3 MediaWiki Extension:OAuth versions 1.24.x before 1.24.4 MediaWiki Extension:OAuth versions prior to 1.23.11 Description The issue concerns the MWOAuthDataStore::lookup token function in...