CVE-2025-11173 — Reauth for enabling 2FA can be bypassed by submitting a form

CVE-2025-11173

Reauth for enabling 2FA can be bypassed by submitting a form PUBLISHED

Description (CNA)

Vulnerability in Wikimedia Foundation OATHAuth. This vulnerability is associated with program files src/Special/OATHManage.Php. This issue affects OATHAuth: from * before 1.39.14, 1.43.4, 1.44.1.

Affected (CNA)

Vendor / product	Versions
Wikimedia Foundation / OATHAuth	affected * before 1.39.14, 1.43.4, 1.44.1

CWE

No CWE identifiers supplied.

References

https://phabricator.wikimedia.org/T401862
https://phabricator.wikimedia.org/T402094

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.