CVE-2025-32068

The MediaWiki - OAuth Extension (versions 1.39 through 1.43 ) is affected by an Incorrect Authorization vulnerability that can lead to Authentication Bypass . The root cause is specifically identified as the system failing to invalidate refresh tokens when the authorization of an OAuth2 consumer ...