PT-2025-40896 · Wikimedia Foundation+1 · Mediawiki+2

Bartosz + 1 · Published 2025-01-01 · Updated 2026-01-30 · CVE-2025-11175

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions MediaWiki DiscussionTools extension (affected versions not specified)

Description A Regular Expression Denial-of-Service issue exists in the DiscussionTools extension, which is included with MediaWiki, the software that powers Wikipedia. This can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-917

Related Identifiers

CVE-2025-11175

DSA-6085-1

Affected Products

Debian

Discussiontools

Mediawiki

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-11175 · Security Note
• https://ubuntu.com/security/CVE-2025-11175 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-11175 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-11175 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-11175 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-11175 · Vendor Advisory
• https://gerrit.wikimedia.org/r/q/I126203ab1d3ec8c1719cbb5460a887e4d0c2cc6d · Note
• https://twitter.com/redmin78/status/1975111033187631466 · Twitter Post
• https://twitter.com/CVEnew/status/2017325384337875116 · Twitter Post
• https://t.me/CVEtracker/43316 · Telegram Post
• https://gerrit.wikimedia.org/r/q/I563219f3298a8740e158d130492bf3d2897784d7 · Note
• https://phabricator.wikimedia.org/T396248 · Note
• https://phabricator.wikimedia.org/T364910 · Note