CVE-2026-103048

UNKNOWN

Description

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data. This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10.

Timeline

Published:September 30th, 2026 12:16 AM

Last modified:September 30th, 2026 12:16 AM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-601

References & Reports

Advisories, patches, and third-party reports

https://gerrit.wikimedia.org/r/c/1346083
https://phabricator.wikimedia.org/T321092

Source: NIST NVD · Data may lag official sources by up to one minute