In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function...
8.8CVSS8.6AI score0.01164EPSS
SaveExploits0References6
Cvelist•added 2019/08/19 3:41 a.m.•34 views
CVE-2019-15150
In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function...
