Description
The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP address access restrictions by making an API request with an existing token.
Remediation
References
Related Vulnerabilities
WordPress Plugin Social Gallery and Widget Security Bypass (2.2.5)
Seo Panel Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-29451)
Ruby on Rails Data Processing Errors Vulnerability (CVE-2014-3916)
MySQL CVE-2017-10279 Vulnerability (CVE-2017-10279)
WordPress Plugin Multiplayer Games Cross-Site Scripting (3.7)