Resource Overallocation Issue in Wikimedia Foundation's Mediawiki - CirrusSearch Extension

CVE-2025-62666

What is CVE-2025-62666?

The Wikimedia Foundation's Mediawiki - CirrusSearch Extension contains a resource allocation vulnerability that allows for HTTP Denial of Service (DoS) attacks. This issue arises from the allocation of resources without sufficient limits or throttling mechanisms, potentially leading to service disruptions. Affected users utilizing versions of the extension prior to 1.43 may experience performance degradation or complete outages under certain conditions.

References