Description

An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate the oarc_version (aka oauth_registered_consumer.oarc_version) parameter's length.

Remediation

References

CVE-2021-31555

Related Vulnerabilities

WordPress Plugin Coming Soon & Maintenance Mode Page PHP Object Injection (1.42)

WordPress Plugin VideoWhisper Video Conference Integration Arbitrary File Upload (4.91.8)

Apache Tomcat version older than 6.0.9

PHP Use After Free Vulnerability (CVE-2016-6290)

Oracle JRE CVE-2012-3342 Vulnerability (CVE-2012-3342)

Severity

High

Classification

CVE-2021-31555 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities