Description
The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP address access restrictions by making an API request with an existing token.
Remediation
References
Related Vulnerabilities
WordPress Plugin OneClick Chat to Order Cross-Site Scripting (1.0.4.1)
Oracle Database Server CVE-2009-1020 Vulnerability (CVE-2009-1020)
GlassFish CVE-2017-10391 Vulnerability (CVE-2017-10391)
WordPress Plugin Share on Diaspora Cross-Site Scripting (0.7.1)
WordPress Plugin WP-Table Reloaded Cross-Site Scripting (1.9.3)