Lucene search

CVE-2020-25827

🗓️ 27 Sep 2020 00:00:00Reported by ubuntu.comType

An issue in MediaWiki OATHAuth extension allows multiple concurrent requests for OATH token

Reporter	Title	Published	Views	Family All 35
Prion	Code injection	27 Sep 202021:15	–	prion
Debian	[SECURITY] [DLA 2379-3] mediawiki regression update	21 Nov 202005:18	–	debian
Debian	[SECURITY] [DLA 2379-2] mediawiki regression update	28 Sep 202021:39	–	debian
Debian	[SECURITY] [DLA 2379-1] mediawiki security update	26 Sep 202001:26	–	debian
Debian	[SECURITY] [DSA 4767-1] mediawiki security update	25 Sep 202017:43	–	debian
Cvelist	CVE-2020-25827	27 Sep 202020:43	–	cvelist
Tenable Nessus	Debian DLA-2379-3 : mediawiki regression update	28 Sep 202000:00	–	nessus
Tenable Nessus	Debian DSA-4767-1 : mediawiki - security update	28 Sep 202000:00	–	nessus
Tenable Nessus	Fedora 33 : mediawiki / php-oojs-oojs-ui / php-wikimedia-assert / etc (2020-a4802c53d9)	14 Dec 202000:00	–	nessus
CVE	CVE-2020-25827	27 Sep 202021:15	–	cve

Source	Link
lists	www.lists.wikimedia.org/pipermail/wikitech-l/2020-September/093888.html
phabricator	www.phabricator.wikimedia.org/T251661
lists	www.lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048480.html
lists	www.lists.wikimedia.org/pipermail/mediawiki-l/2020-September/048488.html
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-25827
launchpad	www.launchpad.net/bugs/cve/CVE-2020-25827
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-25827

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	mediawiki	any	UNKNOWN
ubuntu	20.04	noarch	mediawiki	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Sep 2020 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS25.0

CVSS37.5

EPSS0.002