CVE-2025-61647 — UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights

CVE-2025-61647

UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights PUBLISHED

Description (CNA)

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4.

Affected (CNA)

Vendor / product	Versions
Wikimedia Foundation / CheckUser	affected a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4 before *

CWE

No CWE identifiers supplied.

References

https://phabricator.wikimedia.org/T399093

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.