Incorrect Authorization Vulnerability in Wikimedia Foundation Mediawiki OAuth Extension

CVE-2025-32068

Summary

The OAuth Extension for Mediawiki by The Wikimedia Foundation has a vulnerability that allows for authentication bypass due to incorrect authorization mechanisms. This issue affects versions from 1.39 to 1.43. Attackers could exploit this vulnerability to gain unauthorized access, circumventing standard authentication processes. It is essential for users of these versions to apply necessary patches to mitigate the risks associated with this vulnerability.

References