CVE-2025-6592

Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

CVSS 2.1 LOWEPSS 0.4%CWE-284

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0.

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Produtos afetados

Wikimedia Foundation · AbuseFilter

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://phabricator.wikimedia.org/T391218