PT-2025-42565 · Mediawiki+1 · Mediawiki+1

Published 2025-01-01 · Updated 2026-02-03 · CVE-2025-61652

Positive Technologies (AI Summary)

CVSS v4.0

2.7

Low

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions mediawiki (affected versions not specified)

Description The software has a flaw where user read permissions are not properly checked before displaying PageInfo through an API. This could potentially allow unauthorized access to information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-61652

DSA-6085-1

Affected Products

Debian

Mediawiki

References · 9

• https://ubuntu.com/security/CVE-2025-61652 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-61652 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61652 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-61652 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-61652 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-61652 · Security Note
• https://phabricator.wikimedia.org/T397580 · Note
• https://twitter.com/CVEnew/status/2018497454354882736 · Twitter Post
• https://t.me/CVEtracker/43541 · Telegram Post