CVE-2025-62668CWE-276

CVE-2025-62668

published October 18, 2025

CVSS
6.9
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00417 · 34.9th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-10-18T09:15Z
References (2)
https://gerrit.wikimedia.org/r/q/I29a18dbbaf7e2ce2a713233dbc6880032fec3628 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacchttps://phabricator.wikimedia.org/T402600 · c4f26cc8-17ff-4c99-b5e2-38fc1793eacc
EPSS history
Timeline
  • 18 OCT 04:39Z
    Insufficient permission checks in action=growthsetmentor
    cvelistv5