CVE-2025-32697

NONE

MediaWiki <1.42.6, 1.43.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki: before 1.42.6, 1.43.1.

References (3)

Scores

CVSS v4 0.0
EPSS 0.0031
EPSS Percentile 54.1%
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/RE:M/U:Green

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-281
Status published
Products (1)
Wikimedia Foundation/MediaWiki < 1.42.6, 1.43.1
Published Apr 10, 2025
Tracked Since Feb 18, 2026