未評価
In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callba...
CVE-2019-15150
SecPulse初出
参照URL
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory openwall.com
- advisory github.com
- advisory seclists.org
- patch github.com