PT-2025-16011 · Mediawiki+2 · Mediawiki+2

A_Smart_Kitten + 1 · Published 2025-04-10 · Updated 2025-11-05 · CVE-2025-32698

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.39.12 MediaWiki versions prior to 1.42.6 MediaWiki versions prior to 1.43.1

Description: The issue is related to the exposure of sensitive information to an unauthorized actor. It is associated with program files includes/logging/LogPager.php.

Recommendations: For versions prior to 1.39.12, update to version 1.39.12 or later. For versions prior to 1.42.6, update to version 1.42.6 or later. For versions prior to 1.43.1, update to version 1.43.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-06073

BIT-MEDIAWIKI-2025-32698

CVE-2025-32698

DLA-4249-1

DSA-5901-1

MGASA-2025-0260

Affected Products

Debian

Mediawiki

Red Os

References · 54

• https://ubuntu.com/security/CVE-2025-32698 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13156 · Security Note
• https://osv.dev/vulnerability/DLA-4249-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0260 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-32698 · Security Note
• https://bdu.fstec.ru/vul/2025-13157 · Security Note
• https://bdu.fstec.ru/vul/2025-06070 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-32698 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6591 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6590 · Security Note
• https://bdu.fstec.ru/vul/2025-13161 · Security Note
• https://osv.dev/vulnerability/DSA-5901-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6595 · Security Note
• https://security-tracker.debian.org/tracker/DSA-5901-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-4249-1 · Vendor Advisory