CVE-2020-25827

An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4

published September 27, 2020

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4. For Wikis using OATHAuth on a farm/cluster (such as via CentralAuth), rate limiting of OATH tokens is only done on a single site level. Thus, multiple requests can be made across many wikis/sites concurrently.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01704 · 77.1th percentile
Published
2020-09-27T20:43Z
EPSS history
Timeline
  • 27 SEP 20:43Z
    An issue was discovered in the OATHAuth extension in MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4
    cvelistv5