Vulnerability in MediaWiki Product from Wikimedia Foundation
CVE-2025-67480

NONE

Key Information:

Vendor

Wikimedia Foundation

Status
Mediawiki
Vendor
CVE Published:
3 February 2026

What is CVE-2025-67480?

A vulnerability exists in MediaWiki, impacting versions prior to 1.39.16, 1.43.6, 1.44.3, and 1.45.1. This issue arises from a flaw in the ApiQueryRevisionsBase.php file, potentially allowing unauthorized access or manipulation of content. Users of affected versions should evaluate their installations and apply updates promptly to mitigate any risks associated with this vulnerability.

Affected Version(s)

MediaWiki * < 1.39.16, 1.43.6, 1.44.3, 1.45.1

References

https://phabricator.wikimedia.org/T401053

CVSS V4

Score:
Severity:
NONE
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.