high7.5
CVE-2021-31555
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2.
Impact
An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate the oarc_version (aka oauth_registered_consumer.oarc_version) parameter's length.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | through 1.35.2 |