Page MenuHomePhabricator
Feed Advanced Search

Advanced Search
Use Results
Hide Query

Oct 11 2020

saurik added a comment to T251661: TOTP throttle not enforced cross-wiki (CVE-2020-25827).

I am using 1.31.10 (recently having upgraded from 1.31.8) and something about this mechanism is causing logins from users using OATH to fail as I don't seem to have whatever CentralIdLookup::factoryNonLocal() is supposed to provide.

Oct 11 2020, 5:34 AM · MW-1.36-notes (1.36.0-wmf.8; 2020-09-08), Platform Team Workboards (Clinic Duty Team), MediaWiki-extensions-OATHAuth, MediaWiki-Core-AuthManager, Security, Security-Team
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL