Explore CVE records

NonePublished 11 Apr 2025, 01:29 WIB

CVE-2025-32697

Cascading protection is not preventing file reversions

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki: before 1.42.6, 1.43.1…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS0v4.0KEVNot listedEPSSPresentUpdated11 Apr 2025, 02:05 WIB

Official record

NonePublished 11 Apr 2025, 01:28 WIB

CVE-2025-32696

"reupload-own" restriction can be bypassed by reverting file

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.

Excerpt language: en.

NonePublished 11 Apr 2025, 01:28 WIB

CVE-2025-3469

i18n XSS vulnerability in HTMLMultiSelectField when sections are used

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLMultiSelectField.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.

Excerpt language: en.

CVSS0v4.0KEVNot listedEPSSPresentUpdated04 Nov 2025, 02:53 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage