← back
CVE-2025-62661

Do permission checking when getting counts of global and local edits, new articles and thanks

CVSS 6.9 MEDIUMEPSS 0.3%CWE-276
Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →