Sensitive Information Exposure in Wikimedia Foundation's MediaWiki CheckUser Extension

CVE-2025-62699

What is CVE-2025-62699?

The MediaWiki CheckUser Extension developed by the Wikimedia Foundation exposes sensitive information that can be accessed by unauthorized actors. This vulnerability allows attackers to potentially footprint users, compromising their privacy and security. Versions before 1.39 of the extension are affected, necessitating prompt updates to mitigate potential risks.

References