Information disclosure in The Wikimedia Foundation MediaWiki - Translate Extension

CVE-2025-62699

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Translate Extension allows Footprinting. Translate extension appears to use jobs to make edits to translation pages. This causes the CheckUser tool to log the wrong IP and User-Agent making these edits un-auditable via the CheckUser tool.This issue affects Mediawiki - Translate Extension: from master before 1.39.

Vulnerability class: Information Disclosure

EPSS: 0.003 (27.7th percentile) — read the EPSS interpretation.