CVE-2025-61649

UserInfoCard: Check that performing user has permission to view log entries for number of past blocks

Low · published February 3, 2026

CVSS v4.0
1.1
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php.

This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309.

The record
Technical detail
CVSS v4.0
1.1 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
EPSS
0.00363 · 29.0th percentile
Published
2026-02-03T00:17Z
EPSS history
Timeline
  • 03 FEB 00:17Z
    UserInfoCard: Check that performing user has permission to view log entries for number of past blocks
    cvelistv5