CVE-2025-32068

The MediaWiki - OAuth Extension (versions 1.39 through 1.43 ) is affected by an Incorrect Authorization vulnerability that enables Authentication Bypass . The root cause involves a failure to invalidate refresh tokens when the authorization of an OAuth2 consumer is revoked. Practical consequences...