CVE-2025-32697
April 10, 2025
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php.
This issue affects MediaWiki: before 1.42.6, 1.43.1.
Affected Packages
https://github.com/wikimedia/mediawiki.git (GITHUB):
Affected version(s) =1.43.0 <1.43.1 Fix Suggestion:
Update to version 1.43.1 https://github.com/wikimedia/mediawiki.git (GITHUB):
Affected version(s) >=1.1.0 <1.42.6Fix Suggestion:
Update to version 1.42.6Related Resources (3)
Do you need more information?
Contact UsCVSS v3
Base Score:
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Weakness Type (CWE)
Improper Preservation of Permissions
EPSS
Base Score:
0.26
