CNNVD-202602-505 Information

CNNVD ID

CNNVD-202602-505

CVE-2025-67479

  • CNNVD Published: 2026-02-03

Description (Chinese)

Wikimedia MediaWiki是Wikimedia基金会的一个用于构建Wiki网站的Web应用。 Wikimedia MediaWiki存在安全漏洞,该漏洞源于includes/Parser/CoreParserFunctions.Php和includes/Parser/Sanitizer.Php文件存在缺陷。以下版本受到影响:1.39.14之前版本、1.43.4之前版本和1.44.1之前版本和Cite 1.39.14之前版本、1.43.4之前版本和1.44.1之前版本。

Description (English)

Wikimedia MediaWiki is a Web application of the Wikimedia Foundation to construct the Wiki website. There is a security gap in Wikimedia MediaWiki, which stems from deficiencies in the includes/Parser/CoreParserFunctions.Php and includes/Parser/Sanitizer.Php documents. The following versions were affected: pre-version 1.39.14, pre-version 1.4.3.4 and pre-version 1.44.1 and pre-version 1.39.14, pre-version 1.3.4 and pre-version 1.44.1.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2026-02-03

Last Modified

2026-02-24

References

https://phabricator.wikimedia.org/T407131

Patch

https://www.mediawiki.org/wiki/Download

Share on: