CVE-2026-103048

Published: Set 30, 2026 Last Modified: Set 30, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data.

This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10.

601

URL Redirection to Untrusted Site ('Open Redirect')

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control Confidentiality Other
Potential Impacts:
Bypass Protection Mechanism Gain Privileges Or Assume Identity Other
Applicable Platforms
Technologies: Web Based, Web Server
Likelihood of Exploit: Low
View CWE Details
https://gerrit.wikimedia.org/r/c/1346083
https://gerrit.wikimedia.org/r/c/1346083
https://phabricator.wikimedia.org/T321092
https://phabricator.wikimedia.org/T321092