Open Redirect Vulnerability in Wikimedia Foundation's Mediawiki - Collection Extension

CVE-2026-103048

What is CVE-2026-103048?

An open redirect vulnerability in the Mediawiki - Collection extension of the Wikimedia Foundation allows attackers to manipulate URLs, potentially redirecting users to untrusted sites. This security issue affects various versions of the extension prior to 1.46.1, including 1.45.5 and 1.43.10. Without appropriate mitigation, this flaw can be exploited to compromise user trust and integrity of data, making it critical for users to update to a patched version.

References