high7.6
CVE-2026-13707
Session fixation vulnerability in Wikimedia Foundation OAuth.
Impact
Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, 1.43.9.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mediawiki | Mediawiki | from 1.43.0 before 1.43.9 from 1.44.0 before 1.44.6 from 1.45.0 before 1.45.4 Version 1.46.0 |