CVE Intelligence

The Wikimedia Foundation OAuth vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting The Wikimedia Foundation OAuth: 1 record(s), with affected versions and fixes.

CVE-2026-13707 High · 7.6 CWE-384 Jul 1, 2026
Session fixation attacks on improperly configured OAuth 1.0a tools
Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, 1.43.9.