CNNVD-202510-2527 Information

CNNVD ID

CNNVD-202510-2527

CVE-2025-62666

  • CNNVD Published: 2025-10-18

Description (Chinese)

Mediawiki - CirrusSearch Extension是Mediawiki开源的一个搜索功能增强插件。 Mediawiki - CirrusSearch Extension master版本至1.43之前版本存在安全漏洞,该漏洞源于资源分配无限制或节流,可能导致HTTP拒绝服务。

Description (English)

Mediawiki-CirrusSearch Extension is a search function enhancement plugin for the Mediawiki Open Source. There is a security loophole in Mediawiki-CirrusSearch Extension master ’ s versions to 1.43, which stems from unrestricted or no-flow distribution of resources and may lead to HTTP ’ s denial of services.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2025-10-18

Last Modified

2026-02-24

References

https://phabricator.wikimedia.org/T401220 https://gerrit.wikimedia.org/r/q/I3e8d819868c0491b18368af8e543180e747023c2 https://access.redhat.com/security/cve/cve-2025-62666

Patch

https://phabricator.wikimedia.org/T401220

Share on: