← CVE Intelligence

CVE-2025-32699

Potential javascript injection attack enabled by Unicode normalization in Action API PUBLISHED

Description (CNA)

Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2.

Affected (CNA)

Vendor / productVersions
Wikimedia Foundation / MediaWikiaffected 0 before 1.39.12, 1.42.6, 1.43.1
Wikimedia Foundation / Parsoidaffected 0 before 0.16.5, 0.19.2, 0.20.2

CWE

CWE-79, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.