PT-2025-42556 · Mediawiki+2 · Mediawiki+2

Published 2025-01-01 · Updated 2026-04-20 · CVE-2025-61637

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions mediawiki (affected versions not specified)

Description The software contains a flaw that allows an attacker to escape three system messages used by live preview. This could potentially lead to unauthorized actions or information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-07373

CVE-2025-61637

DSA-6085-1

Affected Products

Debian

Red Os

Mediawiki

References · 16

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-61637 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-61637 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07373 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-61637 · Security Note
• https://ubuntu.com/security/CVE-2025-61637 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61637 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-61637 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-61637 · Vendor Advisory
• https://t.me/cveNotify/155539 · Telegram Post
• https://twitter.com/CVEnew/status/2018497466413494784 · Twitter Post
• https://phabricator.wikimedia.org/T394856 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-mediawiki-cve-2025-61637-8.0 · Note
• https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1193171 · Note
• https://redos.red-soft.ru/search/?iblock_id=24&q=CVE-2025-61637 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-mediawiki-cve-2025-61637-7.3 · Note