CVE-2025-32068

CVE-2025-32068 affects MediaWiki’s OAuth Extension (MediaWiki core). Vulnerable in versions 1.39–1.43 due to an Incorrect Authorization flaw that allows authentication bypass. CVSS v3.1: 5.4 (NETWORK, LOW complexity, LOW privileges) with Confidentiality and Integrity impact LOW; no Availability i...