CNNVD-202510-2778 Information

CNNVD ID

CNNVD-202510-2778

CVE-2025-62696

  • CNNVD Published: 2025-10-21

Description (Chinese)

MediaWiki - Springboard Extension是MediaWiki开源的一个导航扩展。 MediaWiki - Springboard Extension master版本存在安全漏洞,该漏洞源于命令中特殊元素中和不当,可能导致命令注入攻击。

Description (English)

MediaWiki - Springboard Extension is a navigation extension for MediaWiki open source. The MediaWiki-Springboard Extension master version has a security loophole, which stems from the misalignment of special elements in the order and may lead to an order being injected into the attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2025-10-21

Last Modified

2026-02-24

References

https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Springboard/+/1174003 https://phabricator.wikimedia.org/T400422

Patch

https://phabricator.wikimedia.org/T400422

Share on: