RCE in The Wikimedia Foundation MediaWiki - Discussiontools Extension
CVE-2025-11175
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in The Wikimedia Foundation Mediawiki - DiscussionTools Extension allows Regular Expression Exponential Blowup.This issue affects Mediawiki - DiscussionTools Extension: 1.44, 1.43.
Vulnerability class: Log4Shell (CVE-2021-44228)
EPSS: 0.004 (34.8th percentile) — read the EPSS interpretation.
Affected products
- The Wikimedia Foundation Mediawiki - Discussiontools Extension — versions 1.44, 1.43