← Database

CVE-2025-12004

N/A CVSS: N/A Published: 2025-10-21 Modified: 2026-06-17

Description

Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.

Affected Platforms

Unknown

Weakness Type

CWE-732

References