CVE-2019-15150

Published: Aug 19, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/Schine/MW-OAuth2Client/commit/6a4fe4500ddd72ad4e826d9d63b2d69512bd10d1

x_refsource_CONFIRM

https://github.com/Schine/MW-OAuth2Client/releases/tag/v0.4

x_refsource_CONFIRM

[oss-security] 20190818 [CVE-2019-15150] CSRF in MediaWiki extension OAuth2 Client 0.3

mailing-list

x_refsource_MLIST

20190819 [CVE-2019-15150] CSRF in MediaWiki extension OAuth2 Client 0.3

mailing-list

x_refsource_BUGTRAQ

http://packetstormsecurity.com/files/154140/MediaWiki-OAuth2-Client-0.3-Cross-Site-Request-Forgery.html

x_refsource_MISC

20190825 [CVE-2019-15150] CSRF in MediaWiki extension OAuth2 Client 0.3

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-15150

Description

Affected Products

References