CVE-2025-32697

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki: before 1.42.6, 1.43.1.

Score

CVSS 4.0 0.0 None

Status

Deferred - c4f26cc8-17ff-4c99-b5e2-38fc1793eacc

Published

2025-04-10

Last modified

2025-04-10

Weaknesses

CWE-281

Affected products

• Mediawiki (Wikimedia Foundation)

References

• https://phabricator.wikimedia.org/T140010
• https://phabricator.wikimedia.org/T24521
• https://phabricator.wikimedia.org/T62109