RCE in The Wikimedia Foundation MediaWiki - Springboard Extension
CVE-2025-62696
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Foundation Mediawiki Foundation - Springboard Extension allows Command Injection.This issue affects Mediawiki Foundation - Springboard Extension: master.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.012 (63.7th percentile) — read the EPSS interpretation.
Affected products
- The Wikimedia Foundation Mediawiki - Springboard Extension — versions master