Advisories · Technology
Wikimedia Foundation Mediawiki - CentralAuth Extension.
Every CVE that names Wikimedia Foundation Mediawiki - CentralAuth Extension among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
CentralAuth exposes locally suppressed block information via globaluserinfo API and Special:CentralAuth (incomplete fix for CVE-2025-62669)
- Wikimedia Foundation Mediawiki - CentralAuth Extension
- Information disclosure
- CVSS 8.8 High
Security Authentication Bypass in CentralAuth
- Wikimedia Foundation Mediawiki - CentralAuth Extension
- Authentication bypass