Skip to content
OpenAdvisories

Archive

27 September 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5

    OATHAuth extension in MediaWiki is not implementing rate limit

    An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limiting of OATH tokens is only done on a single site level. Thus…