CNNVD-202510-2777 Information

CNNVD ID

CNNVD-202510-2777

CVE-2025-62699

  • CNNVD Published: 2025-10-21

Description (Chinese)

MediaWiki - Translate Extension是MediaWiki开源的一个翻译扩展。 Mediawiki - Translate Extension master版本至1.39之前版本存在安全漏洞,该漏洞源于CheckUser工具记录了错误的IP和User-Agent,可能导致敏感信息泄露。

Description (English)

MediaWiki - Translate Extension is an extension of MediaWiki’s open source. There was a security loophole in Mediawiki-Translate Extension master ’ s version to 1.39, which originated from the error of IP and User-Agent recorded by the CheckUser tool, which could lead to the disclosure of sensitive information.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2025-10-21

Last Modified

2026-02-24

References

https://gerrit.wikimedia.org/r/q/I65c740c8ca5130b40463d687e2f0775951abbf22 https://gerrit.wikimedia.org/r/q/Idac164418362c65d0ad37055fe9e0ad134197da3 https://phabricator.wikimedia.org/T399627

Patch

https://phabricator.wikimedia.org/T399627

Share on: