Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-100379

Cross-request disclosure of CentralAuth cookies in Wikipedia Android App

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies. This issue affects Wikipedia Android App: main.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wikimedia Foundation Wikipedia Android App

Default version status: unaffected

  • mainaffected

References