Unrated
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate the oarc_version (aka oauth_registered_consumer.oarc_...
CVE-2021-31555
First seen on SecPulse
References
- advisory phabricator.wikimedia.org
- report gerrit.wikimedia.org