CVE-2015-8008

The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP…

published December 29, 2017

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP address access restrictions by making an API request with an existing token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02927 · 86.9th percentile
Published
2017-12-29T22:00Z
EPSS history
Timeline
  • 29 DEC 22:00Z
    The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP…
    cvelistv5