Path Traversal in Wikimedia Foundation Checkuser

CVE-2025-61647

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (21.5th percentile) — read the EPSS interpretation.