PT-2026-5733 · Wikimedia Foundation · Checkuser

Published 2026-02-03 · Updated 2026-02-03 · CVE-2025-61647

Positive Technologies (AI Summary)

CVSS v4.0

0.4

Low

Base vector

AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions Wikimedia Foundation CheckUser versions a3dc1bbcc33acbcca6831d6afaccbb1054c93a57 through 0584eb2ad564648aa3ce9c555dd044dda02b55f4

Description A security issue exists within the Wikimedia Foundation CheckUser software, specifically related to program files src/Api/Rest/Handler/UserInfoHandler.Php. The issue is associated with the UserInfoHandler component.

Recommendations Update to a version beyond 0584eb2ad564648aa3ce9c555dd044dda02b55f4.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-61647

Affected Products

Checkuser

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-61647 · Security Note
• https://twitter.com/CVEnew/status/2018497464542917111 · Twitter Post
• https://phabricator.wikimedia.org/T399093 · Note