Skip to content
CVE PROGRAM SOURCE RECORD0.0 None

CVE-2026-13707

Session fixation attacks on improperly configured OAuth 1.0a tools

Description

Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, 1.43.9.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wikimedia Foundation OAuth

Default version status: unaffected

  • * to ≤ 1.46.0, 1.45.4, 1.44.6, 1.43.9affected

References