Schine.games Mw-Oauth2client

1 CVEs affecting Schine.games Mw-Oauth2client. Latest disclosed: 2019-08-19. Critical: 0, High: 1.

Top CVEs affecting Schine.games Mw-Oauth2client
CVESeverityScorePublishedSummary
CVE-2019-15150High8.82019-08-19In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback functi…