← CVE Intelligence

CVE-2025-62669

UserInfoCard: activeLocalBlocksAllWikis does not do permissions checks PUBLISHED

Description (CNA)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.This issue affects Mediawiki - CentralAuth Extension: from master before 1.39.

Affected (CNA)

Vendor / productVersions
The Wikimedia Foundation / Mediawiki - CentralAuth Extensionaffected master before 1.39

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.