CVE-2025-32697

MediaWiki <1.42.6, 1.43.1 - Info Disclosure

Title source: llm

Description

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki: before 1.42.6, 1.43.1.

Scores

EPSS 0.0026
EPSS Percentile 48.8%

Classification

CWE
CWE-281
Status draft

Timeline

Published Apr 10, 2025
Tracked Since Feb 18, 2026