CVE Intelligence

Vulnerabilidades do The Wikimedia Foundation OATHAuth

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam The Wikimedia Foundation OATHAuth: 2 registro(s), com versões afetadas e correções.

CVE-2026-34087 Alta · 7.5 CWE-200 11/05/2026
Users API leaks whether privileged users have their user groups disabled for lack of 2FA
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2.
CVE-2025-11173 Nenhuma · 0.0 02/02/2026
Reauth for enabling 2FA can be bypassed by submitting a form
Vulnerability in Wikimedia Foundation OATHAuth. This vulnerability is associated with program files src/Special/OATHManage.Php. This issue affects OATHAuth: from * before 1.39.14, 1.43.4, 1.44.1.