PT-2025-16010 · Mediawiki+2 · Mediawiki+2

David Levy + 1 · Published 2025-04-10 · Updated 2025-11-05 · CVE-2025-32697

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.42.6, 1.43.1

Description: The issue is related to an Improper Preservation of Permissions vulnerability. It affects program files such as includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, and includes/Permissions/RestrictionStore.Php.

Recommendations: For versions prior to 1.42.6, update to version 1.42.6 or later. For version 1.43.0, update to version 1.43.1 or later. As a temporary workaround, consider restricting access to the affected program files until a patch is available.

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

BDU:2025-06079

BIT-MEDIAWIKI-2025-32697

CVE-2025-32697

DSA-5901-1

MGASA-2025-0260

Affected Products

Debian

Mediawiki

Red Os

References · 26

• https://advisories.mageia.org/MGASA-2025-0260.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-32697 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-32697 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-32697 · Security Note
• https://osv.dev/vulnerability/BIT-mediawiki-2025-32697 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32697 · Security Note
• https://osv.dev/vulnerability/DSA-5901-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-32697 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-32697 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06079 · Security Note
• https://osv.dev/vulnerability/MGASA-2025-0260 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32697 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=34211 · Note
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-mediawiki-150525 · Note