Home

Description

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2.

PUBLISHED Reserved 2025-06-30 | Published 2025-07-07 | Updated 2025-07-08 | Assigner wikimedia-foundation

Problem types

CWE-862: Missing Authorization

Product status

Default status
affected

1.43.x (semver) before 1.43.2
affected

Credits

Dreamy_Jazz finder

References

phabricator.wikimedia.org/T397196

gerrit.wikimedia.org/...iki/extensions/AbuseFilter/+/1166045

cve.org (CVE-2025-53499)

nvd.nist.gov (CVE-2025-53499)

Download JSON