CVE-2026-103048

Summary

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection extension allows Fake the Source of Data.

This issue affects Mediawiki - Collection extension: before 1.46.1, 1.45.5, 1.43.10.

Affected Software

VendorProductVersion RangeStatus
The Wikimedia FoundationMediawiki - Collection extension0 < 1.46.1, 1.45.5, 1.43.10affected

Weaknesses

  • CWE-601: CWE-601 URL redirection to untrusted site ('open redirect')

References