Path Traversal in Wikimedia Foundation Checkuser
CVE-2025-61649
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.003 (23.7th percentile) — read the EPSS interpretation.
Affected products
- Wikimedia Foundation Checkuser — versions 7cedd58781d261f110651b6af4f41d2d11ae7309