SQL Injection Vulnerability in MediaWiki WatchAnalytics Extension by Wikimedia Foundation

CVE-2025-62658

What is CVE-2025-62658?

The MediaWiki WatchAnalytics extension, developed by the Wikimedia Foundation, is susceptible to an SQL Injection vulnerability. This flaw allows attackers to manipulate SQL queries, potentially leading to unauthorized data access and manipulation. The versions affected include 1.43 and 1.44. It is crucial for users to apply security patches and follow best practices to safeguard their systems against exploitation.

References