← Database

CVE-2025-11175

N/A CVSS: N/A Published: 2026-01-30 Modified: 2026-06-17

Description

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in The Wikimedia Foundation Mediawiki - DiscussionTools Extension allows Regular Expression Exponential Blowup.This issue affects Mediawiki - DiscussionTools Extension: 1.44, 1.43.

Affected Platforms

Unknown

Weakness Type

CWE-917

References