CVE 6.9 MEDIUM

Special:Translate tool do not use the correct IP and User-Agent in the CheckUser tool_CVE-2025-62699

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CheckUser Extension allows Footprinting.This issue affects Mediawiki - CheckUser Extension: from master before 1.39.

Basic Information

ID CVE-2025-62699
Source wikimedia-foundation
Published Oct 21, 2025 at 03:48

Affected Product

Vendor The Wikimedia Foundation
Product Mediawiki - CheckUser Extension
Version master
Affected Versions The Wikimedia Foundation Mediawiki - CheckUser Extension master

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.