Path Traversal in Wikimedia Foundation MediaWiki
CVE-2025-6589
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: >= 1.42.0.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.
Affected products
- Wikimedia Foundation Mediawiki — versions >= 1.42.0