Home

Description

Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.

PUBLISHED Reserved 2025-06-30 | Published 2025-07-07 | Updated 2025-07-08 | Assigner wikimedia-foundation

Problem types

CWE-778: Insufficient Logging

Product status

Default status
unaffected

1.43.x (semver) before 1.43.2
affected

Credits

Dreamy Jazz finder

References

phabricator.wikimedia.org/T397221 exploit

phabricator.wikimedia.org/T397221

gerrit.wikimedia.org/...iki/extensions/AbuseFilter/+/1166844

cve.org (CVE-2025-53498)

nvd.nist.gov (CVE-2025-53498)

Download JSON