CVE-2025-61649

UserInfoCard: Check that performing user has permission to view log entries for number of past blocks

CVSS 1.1 LOWEPSS 0.3%CWE-22

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Productos afectados

Wikimedia Foundation · CheckUser

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://phabricator.wikimedia.org/T397396