PT-2026-5738 · Wikimedia Foundation · Checkuser

Publicado 2026-02-03 · Atualizado 2026-02-03 · CVE-2025-61650

Positive Technologies (AI Summary)

CVSS v4.0

1.1

Baixa

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions Wikimedia Foundation CheckUser versions prior to 795bf333272206a0189050d975e94b70eb7dc507

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, potentially leading to Cross-site Scripting (XSS). The issue is located in the src/Services/CheckUserUserInfoCardService.Php program files.

Recommendations Update to version 795bf333272206a0189050d975e94b70eb7dc507 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-61650

Produtos afetados

Checkuser

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-61650 · Nota de Segurança
• https://phabricator.wikimedia.org/T403289 · Nota
• https://twitter.com/CVEnew/status/2018497461845995749 · Publicação no Twitter
• https://t.me/CVEtracker/43535 · Publicação no Telegram