Description
Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.
Scores
CVSS v4
6.9
EPSS
0.0006
EPSS Percentile
19.8%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-276
Status
published
Products (1)
The Wikimedia Foundation/Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension
1.43 - 1.44
Published
Oct 21, 2025
Tracked Since
Feb 18, 2026