CVE-2025-32700lowCWE-200

AbuseFilter log interfaces expose global private and hidden filters when central DB is not available

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.3epss 0.4%

probabilidade de exploração

0.4%top 64% das CVEs

exploração observada

nãonenhuma fonte reporta

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseLog.Php, includes/Pager/AbuseLogPager.Php, includes/Special/SpecialAbuseLog.Php, includes/View/AbuseFilterViewExamine.Php. This issue affects AbuseFilter: from >= 1.43.0 before 1.43.1.

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/RE:M/U:Green

Produtos afetados

Wikimedia Foundation · MediaWiki

Referências

https://phabricator.wikimedia.org/T389235