CVE-2015-8009

CVE-2015-8009 affects MediaWiki with the OAuth Extension. The vulnerability is in MWOAuthDataStore::lookup_token, which does not properly validate the authorization signature. A remote, registered Consumer could reuse another Consumer’s credentials by exploiting knowledge of those credentials. Af...

Fedora 22 : mediawiki-1.25.3-1.fc22 (2015-24fe8b66c9)

https://www.mediawiki.org/wiki/Releasenotes/1.25MediaWiki1.25.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Fedora Update for mediawiki FEDORA-2015-24

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...