CVE-2025-32068 Revoking authorization of OAuth2 consumer does not invalidate refresh tokens

Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypass.This issue affects Mediawiki - OAuth Extension: from 1.39 through 1.43...

CVE-2025-32068 Revoking authorization of OAuth2 consumer does not invalidate refresh tokens

Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypass.This issue affects Mediawiki - OAuth Extension: from 1.39 through 1.43...

CVE-2025-32068

The MediaWiki - OAuth Extension (versions 1.39 through 1.43 ) is affected by an Incorrect Authorization vulnerability that can lead to Authentication Bypass . The root cause is specifically identified as the system failing to invalidate refresh tokens when the authorization of an OAuth2 consumer ...