CNNVD-202602-506 Information

CNNVD ID

CNNVD-202602-506

CVE-2025-67478

  • CNNVD Published: 2026-02-03

Description (Chinese)

Wikimedia CheckUser是Wikimedia基金会的一个打击破坏行为的高级调查工具。 Wikimedia CheckUser 1.39.14之前版本、1.43.4之前版本和1.44.1之前版本存在安全漏洞,该漏洞源于includes/Mail/UserMailer.Php文件存在缺陷。

Description (English)

Wikimedia CheckUser is a high-level investigative tool of the Wikimedia Foundation to combat sabotage. There is a security loophole in the pre-Wikimedia CheckUser 1.39.14, pre-A1.43.4 and pre-A1.44.1 versions, which stems from deficiencies in the includes/Mail/UserMailer.Php document.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2026-02-03

Last Modified

2026-02-24

References

https://phabricator.wikimedia.org/T385403

Patch

https://www.mediawiki.org/wiki/Extension:CheckUser

Share on: