CVE-2025-32696
April 10, 2025
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php.
This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
Affected Packages
https://github.com/wikimedia/mediawiki.git (GITHUB):
Affected version(s) >=1.1.0 <1.39.12Fix Suggestion:
Update to version 1.39.12https://github.com/wikimedia/mediawiki.git (GITHUB):
Affected version(s) >=1.40.0 <1.42.6Fix Suggestion:
Update to version 1.42.6https://github.com/wikimedia/mediawiki.git (GITHUB):
Affected version(s) =1.43.0 <1.43.1Fix Suggestion:
Update to version 1.43.1Related Resources (2)
Do you need more information?
Contact UsCVSS v3
Base Score:
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Weakness Type (CWE)
Improper Preservation of Permissions
EPSS
Base Score:
0.27
