Vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension
CVE-2025-12004
Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.
EPSS: 0.003 (21.9th percentile) — read the EPSS interpretation.
Affected products
- The Wikimedia Foundation Mediawiki - Lockdown Extension — versions master