CVE-2025-62661CWE-276

CVE-2025-62661

published October 22, 2025

CVSS
6.9
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.7th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-10-22T00:20Z
References (3)
https://gerrit.wikimedia.org/r/q/Ia584966bb7d4d707eef50529293aa3d468470f18 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacchttps://gerrit.wikimedia.org/r/q/Idbc1b5a288ffaa7074eedcbac066358a8ec649dc · c4f26cc8-17ff-4c99-b5e2-38fc1793eacchttps://phabricator.wikimedia.org/T397497 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacc
EPSS history
Timeline
  • 21 OCT 19:33Z
    Do permission checking when getting counts of global and local edits, new articles and thanks
    cvelistv5