PT-2025-42567 · Mediawiki+1 · Mediawiki+1

Published 2025-01-01 · Updated 2026-02-03 · CVE-2025-61654

Positive Technologies (AI Summary)

CVSS v4.0

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions mediawiki (affected versions not specified)

Description The software contains package vulnerabilities. The description does not provide details about the nature of the issue or any specific technical details like API endpoints or vulnerable parameters. There is no information about affected devices or real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-61654

DSA-6085-1

Affected Products

Debian

Mediawiki

References · 11

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-61654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62661 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-61654 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-61654 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-61654 · Security Note
• https://ubuntu.com/security/CVE-2025-61654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61654 · Security Note
• https://phabricator.wikimedia.org/T397497 · Note
• https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Thanks/+/1193250 · Note
• https://twitter.com/CVEnew/status/2018497448642302462 · Twitter Post
• https://t.me/CVEtracker/43543 · Telegram Post